MAL-2025-139656 Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145289 Malicious code in native-eslint-plugin-style-loader-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695578aca503670b9eb6a321181bc50f0975204771e573cde2aeddbbde25ea65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144140 Malicious code in kaus-dorado-hyperion-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147758 Malicious code in sedna-castor-nightwatch-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b82800c207357c47644279b2c470bfe39a94a201027e0cd5e7aeb4ec123eb50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145467 Malicious code in nightwatch-fomalhaut-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8383b61773b5aa6e2d7e266beb1e5d0d03731d8d57cbef93747ba115ed2749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142728 Malicious code in fusion-cygnus-scripts-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da0f3ed82a6802e1032006ffa7496f3444868266e937a6df6c74d62d391362d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142302 Malicious code in europa-xerxes-zenobia-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be76406359009b1618def7488ec5ffaeed01ec585e4adda18e5470a73c35f24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145817 Malicious code in ophiuchus-gulp-express-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1ef3a636a5d11609c2390a25dc7393fa60665061ae06eb9494b7e860a2ece8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142624 Malicious code in fornax-halley-antares-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8882d047d9a17c01abbde20487bac4f1b53a7334ed773cb36f7e45fd74913c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143822 Malicious code in janus-nightwatch-aquarius-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4271b28738e8c99a3598fe804e43d022d475a7857d6901558568c2c3c6fab9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139353 Malicious code in altair-husky-elektra-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397657c1f4752fc427c5c228a55cf0cbc4e0269830af8d4e9335b2378ad9d4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144017 Malicious code in juno-atlas-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe986f9340e357c59042cb983f39bec644ea50b8a2b37fc076a6fc865abd662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142242 Malicious code in eslint-plugin-spectron-csv-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4186d0899623ecf21329b54ac8cfb81a5c3d55ce143400e9dbe0088a6262051d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143738 Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148850 Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139479 Malicious code in apex-hexo-europa-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd7bc5dbb9a1d741f30b28b3cd2103c6bced884dfafdcc0742d630ed55e169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...