MAL-2025-144451 Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149870 Malicious code in zenobia-nodejs-sass-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4612b348f54e7b925fedd6e8bf99644e18a6cda4dc4e08b72f5925baae34e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148819 Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef6de5e15a7da6975fe2005dccd99ac7c3db5552e4b587476a8165581e05b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141868 Malicious code in elara-centauri-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10971ec1a6733e379704351180a293b3f5699ba9e8531303ce8229853c62bc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142716 Malicious code in frontend-quark-antares-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2705edc75fdc673a8224482fad5b553e46f7fcd696e1c16c4557c29c33efa292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149580 Malicious code in writable-supervisor-proxima-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bca4faabe3a42840c725348c122be30333d6195344c1bb22420ab73b6bea88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140638 Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148910 Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146474 Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361b8a7389a834642eeb401ef7fbc6dea2d900d52e6c622faefef63f839a6cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142922 Malicious code in global-andromeda-publish-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a433453620d12b4b3f0344641bc39f39ff46ae0ba73b37754ed2da6e1646f3ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146433 Malicious code in postgres-gemini-acamar-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0277a04b53abf1394a107472a82edec4a8da37c1784fdd09e4fd7fa5017e6a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144302 Malicious code in leda-xenos-redis-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5542332365314a057adce06d0c70707b7b5d7e0a586fbf19dab58a88701226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139488 Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143822 Malicious code in janus-nightwatch-aquarius-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4271b28738e8c99a3598fe804e43d022d475a7857d6901558568c2c3c6fab9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-geckodriver-octans-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167d798242c1736c657d16fdf8c788f38667bd86fde31f541aa0f72a178d594d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...