MAL-2025-145810 Malicious code in ophiuchus-chai-standard-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ff30be482fd254786af5632794902b68dcc17f3312a77d047101242c71adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145908 Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147768 Malicious code in sedna-hugo-webdriver-manager-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2830d155cc9eaca20b67d22d37ccb375f000c8fb86ce6a871a47af6795a59de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145285 Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143385 Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141698 Malicious code in dorado-uglify-js-gemini-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139571 Malicious code in arcturus-jabbah-private-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b8043e59a6d62401783728f39ae721c11121e22aee1c7fe10a37851fb697d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141059 Malicious code in configstore-playwright-charon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d23e4681498a17b8540942a340a8b572177655a82088cfdb027d1b5ec94388d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139272 Malicious code in aldebaran-cressida-morgan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff470efd34f66915cb29fb44804c26b3905d8a9b494cebe1dcd75a1a0d180f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149019 Malicious code in upgrade-meissa-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7aa0eb53f38046acb51de930d7b4ee46451b9bb5195ebda094eb86331223a6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143373 Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143967 Malicious code in json-centaurus-yakutsk-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf37872579d57c7904980d46accf7a399584cfd1c2f943c8c74688895d68442d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-bootes-fornax-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6e382da872237546ac26a0a389df759f947829b129c8d324ad31240b58c7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-antares-iota-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219c5e9edff5316f15f5da2c1888bfce3d91c319d26599561b00638d6cacc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-sadr-iota-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35975bf3ca8a3a235bc037354b66f796b3253ef2eb41b0b9ac029c56e4cc74ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-jovian-virgo-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a33fcdeb4deba0f4170b4afadec77720fa04d291e5fbcf73dabae90d835660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149358 Malicious code in webdriver-mocha-nashira-aurora-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb31fd775f1268ae9f1b1b064a05a45c2af095dc6bd9245bf60669d8cdf8df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140738 Malicious code in charon-ursa-ganymede-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427212e66c2c920494458df1e674de9f5ab3f1041f068f2312a5a6c8e028e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...