MAL-2025-144096 Malicious code in karma-centauri-nodejs-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbea0749066ed1590c1aef758933c3c7852e36e96cd4693c167a1910e082d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144966 Malicious code in middleware-upgrade-request-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5060f8be575e1ed6575369264d5000c107ec1eed2ed3c56b9ecab0efa4776e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141934 Malicious code in electron-virgo-izar-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4cf8e13bc345ccf34f66d35bc121a7daffb3dbb0cd0836fb77d60461836eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141841 Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145708 Malicious code in nuxtjs-init-ora-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2ab6c5f5d4fd61ff340323ee7b6c92a0edd0cf2bd80b30171d84397e7304d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140337 Malicious code in callisto-jwt-fomalhaut-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d4edd29a5213c358777f85632ba1fcf13f6e4e6bbdbeed1c260ff2b3425120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146509 Malicious code in prettier-stylelint-mensa-xerxes-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225c1374c819766205cfe8f29d8b4bd86003f72a5708873e823e071659d5fe7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143206 Malicious code in heka-jsonp-triton-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4442839a576bde6f5711839aebc86fbf239039a98fb50a343307fadc3dcc0e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140923 Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147672 Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149452 Malicious code in wezen-capella-release-it-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d598619f1bafc4a144ea9b4ae5909cdb7e126952c9f3d57b5ecbc92654451586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149015 Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145196 Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145705 Malicious code in nuxtjs-grus-heka-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aabd30743192b5db4cf889cca1641cc79c387fa9213807598d2977d5bc2769a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144231 Malicious code in kronos-webdriver-manager-celeste-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa7ea599966a12e7050333baf3e7fda0daee36bcfae5ad1fdf31c994c1185f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143190 Malicious code in hapi-meteor-chromedriver-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33eb4d562c669c05b1e28cb2ae849a179412bc5bed948bd6a294ab59ee6fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144102 Malicious code in karma-dependencies-geckodriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801176c7498c86258fc33864d1d1a0405d7ba7062ec8bb2514017ee4e04b7f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140343 Malicious code in callisto-oauth-rimraf-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b65ecf31bd469e11e4da7810c1f0f232b30db6958c9b2137eb22895f805e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...