MAL-2025-147884 Malicious code in sequelize-version-build-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba6079591827284cd67207a074de45cba5c746afc4d3cb6faac41206fdddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146293 Malicious code in pm2-colors-pm2-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1c149e21cbd215ffdbc28c4860be05c7b5206df3ca1d464843e4d87357a7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-fetch-epimetheus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41d7ec23ccd2fad63599eec79ef61acb71decba3e9dc176f355979acc910918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141528 Malicious code in delphinus-octans-process-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68aa0ff87a380b866fc37af33622117ba664e42555d93a87ea35d500cea9712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145511 Malicious code in node-config-jasmine-sass-loader-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be3c59e0dfe748e4027f1079b928a11014eb9ed0dd0db124e3b57c425b16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141700 Malicious code in dotenv-antares-eslint-plugin-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8a5b6972240c48c0b37ed1252dc6990aa4763cca8a5cd7f23c5ae0bd9c56ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147211 Malicious code in relay-virgo-native-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bbf0b82d1adc23a5064292078fd7c51cefe3f55c09e41f8da9d5714ed67dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140008 Malicious code in betelgeuse-spica-figures-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3acdf5fc9f9d033c6c7d517e33b6ad029d2ed749734530d1b07dd7e485c2871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141816 Malicious code in duplex-octans-proxima-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b3bf319b92e4a0abaaa40adf046cf088a33ab1547bfe298f363a01dbf049a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146824 Malicious code in publish-xo-deimos-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61576b26cc1474af144dae38e94de3ac5b2ce86a3ce05623d73f220d871368d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144962 Malicious code in middleware-nashira-install-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cd71edaa7716a45fc85c9b6f363644f060686a5f3861bae46460cab85fc19b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147209 Malicious code in relay-sails-postcss-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc150921682f088a1426ed36fc0f6647fe46145d69038f28d3b158ffd8f1d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140908 Malicious code in command-io-gravity-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85d428b46a5347f6003a5b341f4bdacf76a07ecde08559de977319a4130e910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149623 Malicious code in xanthus-element-ui-webdriver-manager-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ebafe915aeb6fefc051e9c9f52dc18edbd9a46f52859d379987dfd6b8cbe95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149028 Malicious code in upgrade-publish-helios-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b592e15a5d37c0cbaf384d4b59bc09831c02766fcac6afff08998bc65f344ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147319 Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139637 Malicious code in async-sedna-prompts-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eb88c2f8971fe4760ed74b9feeaace97081beccb982086fb14a92bb504a614c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...