MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144265 Malicious code in leda-dependencies-fomalhaut-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae827852ca50c8b8261e018186531b500df684686ce65d1fcc9aac58119916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146890 Malicious code in pyxis-terser-dactyl-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881621ec4d7106ed416450651d6195f7979fb834bddef57c7ba0760f7650fed3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142824 Malicious code in ganymede-titan-rollup-plugin-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9413cd573eaf0605e0ffed7a4a693e158084145957dfbc0cd50f5112ad02e331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139565 Malicious code in arcturus-bunyan-bunyan-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f10fba060e2756632195d0417b584f2e2c8a31996212806af09d16a4a929bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-pavo-prettier-stylelint-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef069690a1512a2f00962ec60f16b54aebfe8dcef7955eb47bb0bc8bb4ee1b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141627 Malicious code in development-polaris-lint-staged-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c638e326aa053f682240e547e9f90a7b769046b2d21739ef3ca2efad26ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146465 Malicious code in prettier-dione-hyperion-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650be6585d50ddca2685469d48a1b170c812e5febbd8efaf74b86549b042f005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149826 Malicious code in yildun-warp-orbit-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21db3f134339742477b0c7535ed2d243a6e7cdcfbba777f7c34a1836cc58569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145642 Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142885 Malicious code in geckodriver-titan-weywot-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edaed3bc26a79eac172ab1ba313845fb14e0cbaf5284b4847aa3eb43b3d53c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146004 Malicious code in pavo-nightwatch-electron-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4dceed378716fcc9345a96d156b39cf00ed7d7f0067593d60376665be4ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140043 Malicious code in blitz-enceladus-hercules-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1022fc591bd1810eb1036d69e7ab5a393379a1d263acf2197b0e74d2956afd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141996 Malicious code in eleventy-envconfig-xml-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b303cfab127f5de13e9ddbdc9cfbd359b52b49413136ffa41fc2ce9ad4d257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-elara-relay-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55997285779079206d39209f938d28c698c67eebc5704e9a8b02cafa6a34d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-webdriver-mocha-xanadu-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4dc7b351cfdfe332b731cfc5e306c28d94acf928ec0d493c81b06328d944a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-cassini-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd229f989d96ae7a463fc05e63b1f0c0148d0becf9594c760d8e6fc3045732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...