MAL-2025-145348 Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-iota-hercules-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645cceb630baacf494c208f488e2350a32af0532843877e7e691528a0e4a3949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-convict-io-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff837e9f66bdce73e63e136801ec54bd54f71d91562f3848829ef721900b433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-xenon-repository-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620581b45cb7abdf6bd1af267c802b423227a4cff2deb036c36590b0e2e89947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-cors-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9749ec9054bca0d033b67273f121b943ff34485eec11b3bab1c3b3fd501e8aaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147733 Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141376 Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141827 Malicious code in dynamo-jwt-figures-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd3975230bea9be10d63c55ca1aad40d879ee3f650bf54db20e9824353ae13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144820 Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148938 Malicious code in umbriel-dactyl-solis-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d249f078620c3c6197c6535f326ca223dbf289a315dbcfcfd8b6a9b44553ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-link-hermes-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bfe83b1212d87861c13fc564cdbd9e51f7c7ca958ac29114f5bb6a9049e13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146529 Malicious code in private-apex-async-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144922 Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e85307e2ace34bcc68ec8b976c8a081530bd220b6e82e1316e2bbbbde27006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145895 Malicious code in ora-request-io-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c9b22c5b28831c6ab3fe45a56178c6333278db25389c2d08125f9f6836adeca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143945 Malicious code in jovian-deneb-global-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc45d25dff6428f6f80adce429bef51b48997924c82d3651d87cfbcf804143a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142486 Malicious code in firebase-antares-gulp-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131887e95c78bc8e70884167657b75012f67d30b0572a5c2d6c23acd40caaeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148508 Malicious code in terser-achernar-cassini-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541cbd79218ff5344b593c40f24122914bc7da1ce7b64e3ba525419b25e42bb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148192 Malicious code in spinner-dione-fork-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1612606737bf83d64a4d1b8b14f9485992572bf4885bb0055fb0574edbe4f48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143469 Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146567 Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...