MAL-2025-141486 Malicious code in dagda-server-writable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae875b5316c762804cbf34948832e6ac8d9e8e240e5ae1343644ef305b5fd088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147771 Malicious code in sedna-iota-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744cabdb165808ad9bd58d5c3f7c698c27357476b3e8f2562f1598aeb2a9c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148009 Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144096 Malicious code in karma-centauri-nodejs-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbea0749066ed1590c1aef758933c3c7852e36e96cd4693c167a1910e082d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144847 Malicious code in mensa-deneb-global-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94006735c0fb8be6b84ac51781bc561692d741114695724b97d8ffc837eca3c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139164 Malicious code in acamar-arcturus-procyon-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430f2f98ef09397343911706356e3ab2a57ef203f1bcd2117eaed211f0369b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139616 Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147938 Malicious code in sirius-ceres-fornax-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f2388b163e7ec37eda82704f0e6b2e1e2e914a06832c2410f70c506789df1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139950 Malicious code in bellatrix-pino-nebula-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5809b5630c0cfeeb0cfc70f1147f91f5cd46f8af4c6bd74bd28cb99c84a0d488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147393 Malicious code in restart-quantum-venus-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65b610d5d796848b0303f14ea0b4fad513afe1272144ef4f17cf7e0a7b0f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143642 Malicious code in inquirer-cli-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e24b115a829d16b3956d1bc125c8001900849f9d2adfba59701f7f3a09299ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144260 Malicious code in leda-cassini-wasat-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe536149b5984d6f38d2e057ecb9354817629b3760fd434a34a929598c89dc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146695 Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139521 Malicious code in apollo-nightwatch-iota-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e337b3a1b57878bbc71d811c9092058ec1eeab9deff318459ddf6abb92cef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146039 Malicious code in pegasus-iota-link-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdb3ab0c97c2d7514836330e92608bb78a25f46953d22332cb32ce438a1e7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149036 Malicious code in upgrade-vuepress-pm2-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4aa83789c0e6a054547a1cf51bf16cf72c40d7b36e6ff05521271570800e1be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148228 Malicious code in sqlite-gemini-procyon-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33266839bd8ec4b49bd7e073f4cb98f476214e8f83e7217a1b25ce0b091c8219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144660 Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...