MAL-2025-142474 Malicious code in figures-nconf-celeste-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd2e527604d64e34551faa5600bd57cadd35c29ac58e7f998531cbc0c9072c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147313 Malicious code in request-standard-proxima-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf15901a2ba9ef710de697080fd395ee49e41043ac3221f28f48d31e2dd379f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140593 Malicious code in chai-janus-venus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b59ac42dfd91858b96c9ebe107dc75aa2e69f0230b58a92633b3ef4287470d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148405 Malicious code in supervisor-superagent-helmet-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a59e3ffa2586423c766bb07341d62b23bc98f8b2d7e8b30bdd63d44e487e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143518 Malicious code in ignite-leda-framework-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142591 Malicious code in fork-juno-link-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5851779d975f0f23b872722829c51245198fc88dd1c6a17deb0d272d4ece99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149081 Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486ffdc34eb6aee276dd8cb1becca10cf998b6e3f73a94f7fde812b72734c913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142458 Malicious code in fetch-start-carpo-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2106eb00d769ca277b04d0b3ef98e9de6e44658c92fb811c3c5506cd309666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144333 Malicious code in less-loader-stream-publish-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87848632542c547d5ecef043ccf837f25736a226b95c2f670c701032a0ebabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140411 Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141734 Malicious code in dotenv-parse-variables-proxima-mongodb-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971d4e3c75caba63c864868b49bfebd4f37e76c926e7cf9ebe3439219e30418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144928 Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147368 Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147105 Malicious code in redis-izar-react-bootstrap-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6cef921bda83e71f83929fb9be55ab26d6215bfeb47a5eb031441652b002d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143106 Malicious code in grus-ursa-ganymede-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b82a1870f0af524291e5d87c8b3202b4a81455ab7aefd3a9fa1f5cee925f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147124 Malicious code in registry-eris-grunt-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7589992e4db8381ae4a8bb741b6a5cc07e702fcf848a2966e18024222885cf17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146126 Malicious code in phenomic-ceres-uninstall-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e46df6ac51c8d7445b7bd05abfc596bad25b952eaa26ab0106c78d1ab1f3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...