MAL-2025-148294 Malicious code in stop-firebase-mira-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5306560bd11421c1a58180bfdaa37dbeeac85378079eb898a03a023de9119b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141166 Malicious code in corvus-readable-cluster-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c703b164d6f08800f2448b0ab59f117eaa082c46ca937563ffc6be031c94526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139789 Malicious code in avior-upgrade-frontend-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82629c5437f4b0d4c89ab021f789b978e879e95e377e702e4c55f994b4e888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149005 Malicious code in upgrade-celeste-subscription-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1564bb9d0715008853e1d1e6481753b878a80830a3c8fca82c3f2ed71aeb9355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148099 Malicious code in spawn-javascript-octans-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64dd616828dae7a57cdb79f4ef09c707f80d91e83b6d45254dcf58df9530338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145105 Malicious code in module-grunt-async-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1620c42d6b9a3626d387266ad5905f22353fd99815e09bc9822177cf2e95d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146056 Malicious code in pegasus-sqlite-yildun-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3dc5fc95ad0f7c7ffaed90b154c098ec97d5db507c5fad75490cc9d210ac2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144793 Malicious code in meissa-atlas-algol-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 620c20eac5d9bb72b6d93c31c759d1b41add6bdb1393d047ef5a293c34052a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144393 Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140876 Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147440 Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146346 Malicious code in polaris-hexo-process-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b50ef2bd3d40f3714e6f6d474a137cab45143d7cab9e3fee3d3b37879008f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142199 Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139755 Malicious code in auth0-request-postcss-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fca1fc606cf6304fd682277d3fe822752201f5db947bc62472a4202d2ddc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139475 Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143286 Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140330 Malicious code in callisto-envconfig-elektra-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7d907eb9367a03573b35691a229a030c56a6e6a51bb48b07f065fb6de0eb5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146630 Malicious code in procyon-zephyr-gacrux-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b36dd182333e223a07c14e080a25615a128d34c5de792bd9756e21634425f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-dotenv-safe-electron-builder-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f221fafb950cbab2437dd43b98e8014478bba6dc13315af5146413ce1635d6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...