MAL-2025-146882 Malicious code in pyxis-leda-iota-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c470968dc0f4f1b5769ff5b48425093b4c2b56337f679c2a11b9757d72f10f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141000 Malicious code in concurrently-algol-express-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a0058178b59b515a67b56d6ac529d010098fd03ede8aab04ae2f929cedc8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148792 Malicious code in transport-lynx-transform-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f627df8c289e0b003c1cc35af435b79b568976165f0a92a17edf2c0d94adb8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147648 Malicious code in sails-jabbah-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6860061d743f6953d2851725ea2189350d37e0e2b9f3c1a48631a6ba4b8d84aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143105 Malicious code in grus-typeorm-koa-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec8ddf276ff22a8a0a69f94799d92ef10703075a6b5070301b7b59216223214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-socketio-altair-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdf43b480a5a806a64b8c6127b929eefaf3e68aaae5dc0fefa14aa5fa3888ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-reveal-md-apollo-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4a00096a1a55cdd7d885bf74d3992ced5d4c3de15d37bacd0d478ad38d7151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148384 Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144971 Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fab84b007bf18d2be53f34e9459eef3ed9c6f3df11ecedfddf8cb18bb4da19a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143292 Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140345 Malicious code in callisto-playwright-publish-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bea5b7884fedd3cf87fa9645c779ea6d02be1f8048fda82a3760b16b90d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144913 Malicious code in meteor-html-webpack-plugin-mui-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ba44be2ccd673c3f19ceb7a542f761f31250400b8f3caa7ffa5327a7e58323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144236 Malicious code in lacerta-deneb-react-bootstrap-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ee4a9712b532e871f7b4ddaa054d992da7855fe931e1bc6d0a47c71aa8e651e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139963 Malicious code in bellatrix-yonder-umbra-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82c027042fd92c3a30c321fafd4afb495182a3bf29c1f24514ba2afb57de9e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144842 Malicious code in mensa-apollo-firebase-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e0231c97d5ad71e53184aa2327549e5ad41ea6fbe8a1fb8617a327ce0f28aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149350 Malicious code in webdriver-mocha-jabbah-csv-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42546448faae6a4d65c744b2b68f7c5abb36c64e33b66466ea0e22c898a9363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139901 Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143568 Malicious code in indus-meissa-jasmine-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8770522c3fd3f632c35f7721e8ffb1be3ac635d15c09b8d80c5fe9c999b844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...