MAL-2025-146619 Malicious code in procyon-tethys-epimetheus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c4505908d045c7c1770f056d056661a1d22b54f2795399b9d6158dfe938d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143877 Malicious code in javascript-chai-levels-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f54d571407559b74364357ae31392c1675aeba12ac051cd7497dc96918574e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149335 Malicious code in webdriver-manager-standard-rest-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106eb1a1e61fd11a05d8de1fe363d28f115065bf4e220f6c38373f9776c875d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143477 Malicious code in hyperion-hermes-oauth-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0492b74e5b2ea4569a72ef3f1cb2e2b3abe987a865f7fb22505c6071ea3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140588 Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145062 Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146039 Malicious code in pegasus-iota-link-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdb3ab0c97c2d7514836330e92608bb78a25f46953d22332cb32ce438a1e7e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146181 Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141451 Malicious code in dactyl-proxima-xenos-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd98d2a90da565834b252f27ed28923a8f160728c2a20f669acc1d5c4eff4edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144484 Malicious code in local-child-process-supervisor-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4eaf60354d0570e14c670da6c5ea1d1394c86e5490ab4c7cedb36b6413f77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147868 Malicious code in sequelize-global-regulus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb6fbb2c60af525d77758d45c8ac6eb302d88c3211b99f14055380f61dc294be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148009 Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143348 Malicious code in hexo-ora-quark-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ede24e2e082bd4c2dd3b03c782c1472ad70a135650e7ee57998bd9e62f1e531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147497 Malicious code in rollup-gatsby-carpo-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7633966de8775550897762e490bf07feb82135625f1b6c5529663e41a0889349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148628 Malicious code in tethys-pegasus-transport-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e428cb86288f88f4bf266873cf880292a9e55116621063141b262bc914d966d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141612 Malicious code in despina-zenith-cluster-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afac8d96a14b136b5414f2059892e47e4d6d250979ed427ed759b823318e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139536 Malicious code in aquarius-fornax-mocha-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0429d5658b57d37a3469eeefcc63d48eff90681f01f03cd075ebd59e13521048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-izar-deimos-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade47e5512f5d5ea7ae6f5275ef4dd11f9b97b478c61a8fe6376509bf39e0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...