MAL-2025-146876 Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148552 Malicious code in terser-webpack-plugin-foundation-less-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15839f0d43950e7017ec6478f3d5043f812bc56814c15fb3687c2a636ce3446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146528 Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142575 Malicious code in forever-tailwindcss-orbit-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085287e53cee21a1b2871fc6302e58161bc1d180e0510e2232091f732f96c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143024 Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148347 Malicious code in subscription-airbnb-europa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93def4c8b79f60fa808459f0c3eb104c1782bc6573fefaa8f6a433cbee409cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146024 Malicious code in pegasus-dotenv-safe-build-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106c26131af84fd2a13ede22f176584dcbcea99e0b41cb22247d09674a890af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145738 Malicious code in oauth-yonder-galaxy-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d70ded952f8de2ce371bb5f64f977cd19dff957f0d3a4a8ca34c1c3a1bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149887 Malicious code in zephyr-koa-materialize-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64745d3cf97eaeccfe96114378f3aac75817dcf2d747b7c3eca54e7d2f8341dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145581 Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145614 Malicious code in non-blocking-loop-semantic-ui-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d03eaa288cc6f9553d625662d06e4257bf68ba16bb7d2e4880f8521db9e278f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144821 Malicious code in meissa-package-spica-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06830d0d2811f58493f165db7cc5019995d7b7b753a08368b0548077f214f4a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148617 Malicious code in tethys-enif-nconf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799881d4131b02e60faafb9b9e35aa3e419a470cb3672d5b78292cc00b780831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147467 Malicious code in rocket-graphql-ini-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65d7be05544e2945986caee4040fa49c30be25803076584957fb91435bddefa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147649 Malicious code in sails-javascript-nodejs-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17304e2a6bbff648b6d32463f834700b906ce3fe91ce25015d40c032aba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145403 Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145641 Malicious code in norma-fusion-corvus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...