MAL-2025-149470 Malicious code in wezen-spawn-oberon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5ee2abc458f3a13891087a3f60389332785b5b51eebc48a7cda288b973970d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149548 Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147304 Malicious code in request-neptune-meissa-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192ae7b04f04285ae982c76237dc726ae80e3d013cbd96c0fe8ac8e70d13447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147131 Malicious code in registry-kronos-bootstrap-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a81b3ac18b5fbd08cbd211039271d5e92daac86cb75d3103fe9f2116ce1527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141796 Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146130 Malicious code in phenomic-dorado-bulma-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76899facbd5ca2109c5ce1e8dc1f897cc7d335c9b6fbf3f78f78d4eb4407770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148837 Malicious code in typeorm-barnard-pino-pretty-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbea876bd00d52fa399c8b70c6e1edece224f60860cb91de7f0eeba45b7c7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143596 Malicious code in ini-passport-quito-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ffeb311d8f1e110ffa3b60f8f0c6ac8e6d86e6a7314e921dface5e09c5170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139848 Malicious code in babel-changelog-janus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f03050bd0f5483fe2c9e2cc51b0ddefa2074e512ce37415611c12ec433f8a37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140003 Malicious code in betelgeuse-run-script-remark-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c2cdbc659b5041a4756841648df36f334767057003606503f48480ad4080fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140163 Malicious code in buffer-nodejs-native-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bdfe7b627e6dbe13e573500c4bac8abb0660f48ef88bf69c58ce61ebef05e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145904 Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149366 Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148647 Malicious code in thuban-development-carpo-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aed78094c857d95113ee1ba03e8faeb5c7cc1748b610acad1eb180397ae48d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141204 Malicious code in cosmos-cygnus-lyra-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ea5671549d7a81850a48019ed11bd27275dd856aa63b52f9897f866ec1a5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147411 Malicious code in reveal-md-grus-middleware-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5aeec93a734c0dde2c4d4e430a88ca8320a46fe77ff5af7125db03ad02c7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139902 Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...