MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-ophiuchus-eslint-config-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70067f59028c148db888ac9fc27d2a76217a56f8ecedee3af5f4f81c07c29e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-wezen-orbit-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff9fc080d726744bf26af498f5d41c74b318aef7f0bcb6a90d9de1cd991687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-vega-astro-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a9230f5afa40c2c6c97e4608598d88bb8ba4e36451cd25491a7460626e7794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-antd-transport-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6569a662a70325bcc24af5690240507a958b0858db69dd698905ea5bae8443b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-quark-nashira-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914f834f4b21cb90921290893bd5c244d57a77e5c7b1290b8eb6ad292bf0b7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-nuxtjs-configstore-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed224f2d4c4313c0bad8649b36a558e5a593b3dbbab706401a7a9e60a6208de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-element-ui-gatsby-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4175fec53eb9ea162464df2522513155eda1ce993052c64a2b283b5cdabf86a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-hugo-indus-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96530a9a643952073fff332c1ad656ea9314648258f54a2ba8a5b6cd6ed8ff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-mdx-vega-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fea83eda297ee0d2206429ec6f0badf1cf7ed75ff63d80009fb755fce2112e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-quark-native-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d573b248cb4590647cf0dcf614db037deca09356997105e212cb80e7c7dee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-zenith-cygnus-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d084c950dd5dc4f71460664d9a08a96009f6beeb79aaf14ec9c669e382574b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-indus-nconf-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e761246ffc63d2bb32ee5f52d1719cdb8e4c275432d80320214bb2ec3ae42693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...