MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144870 Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e328f01f93a5d5887cc6910c54acc8b4c6ad9adc906fd77d0ea49a19e5caa52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141605 Malicious code in despina-process-scripts-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfde1fa601c3eec22c025c031edeb243d99a0f5344dbaa7ec5e5caea3b93b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145358 Malicious code in neptune-eridanus-dynamo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04984e267193cc3d939a9ae85ec1f22e219b8dacd45b35cee3053f79a7d63619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149252 Malicious code in vulcan-reveal-md-ora-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2277bd541ddffacbe9f8d9d3f072882300533890a4b3807ec413ee381b2b8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141527 Malicious code in delphinus-oberon-resolvers-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f07dd9d57dab6a0026c421c766bdfaef2aab35236f4b0373b185967b47b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145708 Malicious code in nuxtjs-init-ora-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2ab6c5f5d4fd61ff340323ee7b6c92a0edd0cf2bd80b30171d84397e7304d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142907 Malicious code in gemini-nightwatch-janus-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80540366eb681c89a52dd816b4a254ea23facb053fadf663e40828a96abfb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141945 Malicious code in elektra-draco-kinetic-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835c5c46294da48232131572c21f92bce8569b7fab18a506b14de16c645e61cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149102 Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148284 Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144341 Malicious code in less-non-blocking-run-script-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8eb2c157e35b8e588e935fc40fe578116e2c12180c063d5ec26c9550c7c6ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149361 Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148099 Malicious code in spawn-javascript-octans-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64dd616828dae7a57cdb79f4ef09c707f80d91e83b6d45254dcf58df9530338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139243 Malicious code in aether-tailwindcss-wolf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6136f0bf4e96ffb80b8fa0636d975fe1f01d92b14a4af0786a0d25f26d50b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144966 Malicious code in middleware-upgrade-request-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5060f8be575e1ed6575369264d5000c107ec1eed2ed3c56b9ecab0efa4776e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149494 Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-jabbah-exec-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9665f29319155c079ffff7417dcf3d0ea8b3d96b518e7331384270a81b06f975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...