MAL-2025-149774 Malicious code in yakutsk-luna-sadr-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996a4bf7897414bbaf10aa9131054dcd59cf851b964ad40cd9224667d292f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149068 Malicious code in ursa-phoenix-webpack-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0778f1068026d84c80059775ace98837d4c0ad76ac7c5bf4886c84953646e947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149338 Malicious code in webdriver-manager-xerxes-event-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db070374083eddb2daddb8c997cff503dade123452489a5471fccd7524dc5dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141451 Malicious code in dactyl-proxima-xenos-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd98d2a90da565834b252f27ed28923a8f160728c2a20f669acc1d5c4eff4edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149361 Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145734 Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144465 Malicious code in lint-staged-sirius-xo-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146741 Malicious code in proxima-slidev-spinner-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8f1feb12d523dd1c0ba628d1d978baf8eff5ad1e1a1bfed2ef1fb124bfd346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147771 Malicious code in sedna-iota-levels-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744cabdb165808ad9bd58d5c3f7c698c27357476b3e8f2562f1598aeb2a9c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149102 Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142555 Malicious code in fomalhaut-ultra-google-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fcbc513c0a9967340a8bd1620fc65e6e92e59d328195923c5bc0665411f5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141743 Malicious code in dotenv-safe-astro-sirius-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cb87dd0f0cd51c19f01a21a145760bebc9a3e39e9fa193ece9d01ea33fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147116 Malicious code in redis-version-dependencies-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e8aa777567e102ecfa9331f56f1fbd8e6f529afe415a4d19dfb6fae86fb8b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146619 Malicious code in procyon-tethys-epimetheus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19c4505908d045c7c1770f056d056661a1d22b54f2795399b9d6158dfe938d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149423 Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141073 Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149592 Malicious code in xanadu-comet-nodejs-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c8b88537d70aec0a919a25e1ff2865a738eec203cf17419753dbc477806aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...