MAL-2025-147196 Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140465 Malicious code in cassini-hapi-prettier-stylelint-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805ba38b148cfabe8f25665943929971e9a2d370343a3be456789c8d84ec390a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141999 Malicious code in eleventy-hyperion-nova-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a26aa108c03ab09f42e137ce63034d09c9d1028ffd7e9bc25d0d6bf4adad17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142466 Malicious code in figures-elektra-server-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbbbb9b2520c1478dfb726fa301de4236a1b2513ba8a3919ab86d5228a7ead2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141709 Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146653 Malicious code in promise-uglify-js-chalk-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d217294d5c2c2e64d732a8ea1fc726b9a504ae3f6a023ec18b1f4fe46edc6187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149014 Malicious code in upgrade-halley-hercules-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8fea094d24b08ba278de689ffd3f83c4c26bad5f1a106c99d860a488b9ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146109 Malicious code in perseus-quark-arcturus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f657b0a6018bdd1bfdeef1e46d6a6e7daa9470bd4549627d647c52014c97745b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144172 Malicious code in kinetic-frontend-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c2450043f3735e544391159d66ba4fcfafa0a14422c926bf869d2378dbbe74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147882 Malicious code in sequelize-transport-wezen-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca29ff1f63a5f48497794935781fc2d1df5ee67fd2936e9dc35f28b316f3cdc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148179 Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139490 Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-fornax-xerxes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccde657a05676a3e3b9f919622689ae943a012f86450f132569c5866c8e60b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-alphard-promise-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2d18ca2f3faec8f5b44d1646ac4e157f8fd63aa204750ef48ed219fceef1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-transport-pulsar-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd5d66b59f878e14ee4cc32f6bb2d9d17b8fac7dd4a593beaa5d64a80e21e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-standard-sagitta-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e41ca778897239c3e5cf27fd5df06531d908fac9d45d23d17e3169fcf0ca97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-proxima-juno-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50866ac7a2fc8217495c8002e3ddf8b9a1da86ad209ed146a267149f7c54a5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-puppeteer-got-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788ee5ebff473dad8df11e086642382331492615ac2e657a5d1576b67ab64f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...