MAL-2025-146887 Malicious code in pyxis-proxima-library-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e290981069fcb3fbb09a26760568a295e5352425ef1a2aba07e44b744be012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146325 Malicious code in polaris-backend-lynx-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3040abee7c495e48c1a8af71791a2cd96cf6d49319dbace10478b91cde00f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142411 Malicious code in farout-fork-aldebaran-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108e364c3a72ba84354e451e03216e5cfc26e6c2e5e436f26055b6f868d5a0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143623 Malicious code in init-halley-non-blocking-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f102816d1ca7c2c09d3c6c14aab8bd1a8a6f2a28ff7782c0f63b68d47c0a70cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143969 Malicious code in json-configstore-venus-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347eaa62a2c6352a4b45d8e3f3a6634c1126a184e8ecde236b3712f87f73c0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-solis-colors-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912415a2c51293a221df24e5c2beb7ade2fe9015be12e08dfd3b35ed100bc608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142036 Malicious code in enceladus-rocket-centaurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b061d89952991a916b5ff83172655de80a4aaa23923da6edc33be57cc4669296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141628 Malicious code in development-query-pm2-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00b132f0a55368d12101518326d44169793bbcf76cc7aeb0bd83264f0b0fb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146131 Malicious code in phenomic-element-ui-publish-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba58e853d0af0e2664e70c345523ddd91c142e1fa69ff52e7e8d1545fc87d569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143277 Malicious code in hercules-configstore-telesto-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d123a83e0adad67619b53cb90be0f24177b7f9990c76a5d254c073cd35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141606 Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146612 Malicious code in procyon-quantum-ganymede-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184b056f5fa6c8493f7d18673a4bce96732448062b2c6cf87205a3b11cb6d948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144521 Malicious code in loglevel-telesto-pino-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5290f6af3b7764bf5e079fdebd8a5058e7da516a2a52311b06f53c03e46cd3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145851 Malicious code in ophiuchus-wasat-winston-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9054d64bfdec4b7199f9f5aae28df4399dbf0746e791e2a667fb447fd6b93d1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146989 Malicious code in quito-bellatrix-polaris-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0332c27cc5eaed2686c971201590aa7f14bc67ea3b5004f6f6a1d5b9f1ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142352 Malicious code in exec-mocha-pipe-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98eab42201e22336dea2c31ea0ea8cc9c09882c65535f3ee18ea10f719c32e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147179 Malicious code in rehype-orbit-yildun-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d493e8fda77dc1418c68e0b5c3ddc494015c5b69c056b5cfb9f768378af0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144219 Malicious code in kronos-grunt-sadr-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77e858e6d1a107decdeeaae11b5f3cac7d091cbd8cf3627ffeb3de7918adf8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141669 Malicious code in docusaurus-kinetic-leda-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e61fd0f8a954efe8419f09851f40c614971a38e052be8080419ec4775c845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145277 Malicious code in nashira-juno-markdown-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0341b08d5f2ccd87fa18915de455941efd4dc2d2bf55d556c366ea0889c11f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...