MAL-2025-146790 Malicious code in publish-jekyll-miranda-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6feeb4b563ffc117fcba1336c759485b16a38dba134d42144cfb8a11dfde6d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148294 Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146361 Malicious code in polaris-playwright-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ce5a8acc186e4762e4831633d633f82fe9434b7428f24bfe3ed5bbaea92da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146437 Malicious code in postgres-iota-testcafe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1560b6c8b722d09568f71ef3cd851c6896f97b12a95429813738ac245e8488f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148767 Malicious code in transform-lyra-run-script-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbfac3d27d5e5585da3acb64aa34cfa3abf68b3bb6b10150c197fca788b64a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148727 Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139569 Malicious code in arcturus-fork-cassini-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5034f07878345120b3e58d57a392ead084af6eb7f29ec57084ae84861f00c8af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140523 Malicious code in centauri-achernar-xo-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a12a3d9edd9de56818674de53b88391cd2453fe22b06576d063f3b92e289a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143742 Malicious code in iota-spinner-dione-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b83bef8ea4e660bc19ddd7833865216b2297bac5083abd74540da72d493af87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145988 Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140016 Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139337 Malicious code in alphard-pm2-centauri-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb818ecdfcf56998d260bdb19662ec3fd60998067d6615a5579a6ce41d7dc8ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142218 Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148042 Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143284 Malicious code in hercules-ganymede-geckodriver-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e914d6e241186d4d4fffda8309b72549ac5b2e3b99f0988811112760f04dc348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140923 Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142040 Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146151 Malicious code in phoebe-fusion-soap-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22f0820b09c7cdfefb0d7d118c8e8b2ecae5f922d629da09c23570bbd6543da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142640 Malicious code in fornax-mysql-bellatrix-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...