MAL-2025-140341 Malicious code in callisto-loglevel-electron-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4a957b6d9ec52cad85ef2144c73b018c6121df283ccd8fad94540c5c1f919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143848 Malicious code in jasmine-carpo-scorpius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0e478b82bd4c6989f3b5401fe834e59f45fd9f764b88f40b4aad9210d51eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143031 Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147787 Malicious code in sedna-postcss-gravity-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147017 Malicious code in radiant-nightmare-xo-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c61b5919ccdc6ceec342de4c981a1542a5edda541b184e746f033085bde9a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139896 Malicious code in backend-ursa-achernar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28154fb6cf14fc46227c7074418385889b26097c09010124f744fee0a02f2dc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145030 Malicious code in miranda-elektra-epimetheus-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6bc92613c692f422e1eeb84e62b6d937606f05483376161f03de703a402e984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142253 Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142985 Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142308 Malicious code in event-centauri-hermes-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b18852ada8f89c69391c09adc9da0f5888546f603e7fbdedb92e8893f622d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140406 Malicious code in carina-chalk-init-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef8c8bd4b48ecba82f3b9e360f783e207ace38237e1a23d6f3a7637878b685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144374 Malicious code in library-eleventy-start-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef5c3375e9382697062795f0b29e5fe5a516d4292590c3003a1e2eef900faa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145352 Malicious code in neptune-aurora-backend-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149183 Malicious code in vortex-hyperion-chariklo-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb0574747e317160ee377a0984d32a00b5da31f25184452bc5b52ba40041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143672 Malicious code in install-config-hydra-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276ed3297a64726866fd682b9a60e6b8eb9375954fce02ecb2c46cb27181a072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149368 Malicious code in webdriverio-eslint-cygnus-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40adf6575fdd97c14d1b44ca0c8a3eccad0aaa5d7cfb7a096393e72c2df78af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143574 Malicious code in indus-relay-nightwatch-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbfc7dbd014955090a7ff9658944678f02935f0e7d86b417c54fbd53fdac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144220 Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...