MAL-2025-143466 Malicious code in hyperion-bellatrix-carina-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d1bdf4a11c0a392a600e12d08a06142d23cf402e33d975e8db903eb91dfa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148422 Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147119 Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139630 Malicious code in async-nightwatch-auriga-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ea1f1546d21c3f5b13122ea4150fdcc0800fceb20f7bc5ea7689a4a9b2cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146256 Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149288 Malicious code in wasat-eslint-plugin-figures-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc35bbcd2f127f59b93516a803fe75b50e0406a0599ba86a9e3133cd9e8c83d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144673 Malicious code in magellan-vortex-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f82c6172c917e1fe89c1b3de08f1f7b8fb7a88d57cd33429fa4cb05c4baf99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141917 Malicious code in electron-fornax-testcafe-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e6fd8c4dcf774ad276826eeba711a2d2ff461fa4ae94f3b74e2d259b6c1d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145636 Malicious code in norma-command-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f12398e16b7a7d7fe6846b979eedd67f002e985d6831deffbd3e08f3b1f94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145931 Malicious code in package-ganymede-aurora-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e90255487efd08bc6f593e89aa88ee9297b0baf8b426b7ca816dacd1f45ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144736 Malicious code in materialize-celeste-eridanus-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d702a92f89ce951ed0dd9e020041f48c12217dd201c89f2cabf03056e73fae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148116 Malicious code in spectron-ignite-arcturus-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02efe1bbb2a2449adec297c17d1ec80cfa16c0a66e9372af5fb45a925bf1e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147852 Malicious code in semantic-ui-link-firebase-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21be48c246899375bd87162c4751be02e482538515eb7f28d946006bb37c1d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149744 Malicious code in xo-auth0-sedna-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6115d7299c1ee0661506989c8b57a5b3843cef8f80d738a09ca55a831cd2c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143662 Malicious code in inquirer-stop-spectron-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7dcacfa1afed1563aaebc9ab7b548454af8fb4f66f1d59bac91eaefccea02ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142364 Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...