MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148269 Malicious code in start-deneb-gacrux-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217f63bece54cd97f2cbf64265aa70fc2de9d8e2e0c835429695d2d46ed483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149207 Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72b52b005ac79b24237f34f7b4a002e4d2e110209c57ab77354a8a1dc6aaf4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144379 Malicious code in library-magellan-telesto-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143878 Malicious code in javascript-dotenv-quasar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996a3dae89f9b7e3bb0b73ff7640c83fb95b29c9f700d3dfa3ecbecaa30be33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143458 Malicious code in hydra-standard-dependencies-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 537bdc379a0f7717af8724e67fccaa8f2f0474efabaed2f5e7b3827952eb29da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143367 Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be073f8cb8485f271913239bfa8cae9973ba43ca51182df57b25b58b8718f62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149122 Malicious code in venus-sails-betelgeuse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab7dd16388a93e8047078995ecb25ef16b1db8fece43c462fef99199b710136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147922 Malicious code in shelljs-nestjs-orbit-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4846b16e10fa6cb6232bbb3111de62fd9b9062e8b834653bb3ff95361135b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143979 Malicious code in json-passport-eslint-config-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aebaca9d83597eaa315d6064a074b23ccc4564c49240edf92a50d5482b736c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147218 Malicious code in release-it-chai-framework-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fc75454b4d7fb05b9e18236f66515eea7bdf45689c68839a7279679c7d7067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142184 Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144270 Malicious code in leda-farout-alphard-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de067a656c1a4c8562342873535d10d54d00d09ca79a49547628a67bded58c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142242 Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139599 Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146990 Malicious code in quito-betelgeuse-ursa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d12f9bb05b4af8c30ac4689719f757f75fa39a781e52d2bb98ad133ace0e3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142302 Malicious code in europa-xerxes-zenobia-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be76406359009b1618def7488ec5ffaeed01ec585e4adda18e5470a73c35f24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...