MAL-2025-142077 Malicious code in envconfig-loglevel-odin-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b321c45b81b732779a0e076155f3dfa0b59bf86d2bd3064660daeb735949ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146894 Malicious code in pyxis-webdriver-manager-selenium-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd635838c8a3e29ed758fb816df1aae5113f58d4136c3bc38d13731170c1aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141314 Malicious code in css-loader-relay-element-ui-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3a2b6b8eb1dcee62835621683bfa4bac6dc855bdb77725f0cb058fccaf4ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-apex-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5af945fd83b51e0b4e1ef98ceeb87b03d2659cd4bdf13b320dc9ad61431285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-puppeteer-epimetheus-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def9be268d2d926abb82e79f1208f2966efb28383b0247f0e9aa11319cb8ac2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-aquarius-callback-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de1111468dd157dc24fdae11e31d4d41f4cb9001bc90e624802b0b770804ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-server-mui-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c123fc1f820ef4f5e68ea945c2a2a7c074788b2210b979790dd54b81cc1d2ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-superagent-leda-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71af2c3d51c8ab2f3f8f9b9ea4a0bbf0fb1e52a90372ef96a0e8c2fabd93a69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-radiant-procyon-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424d9e1f0ff447b5f9d760005a5ce6aa0408f107310e362b55641a9b2accf627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-delphinus-npm-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 129a352ca92f6102c391ab9f3a557c8fee171e8222da3bdb8bb217a365212865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-metalsmith-rest-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005841e6161cc0f0146a62615f6eae5c47197caabf44e0ba61f55a86dabe8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-colors-umbriel-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 816e1c6b313dd8cc06efc8b2eb7332f267ca478a69bbcd2965f31859ce9b0887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-despina-spectron-webdriver-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcae3f6d4ea7e4a93214a5c60527bce4d58171d663259f9c538861ab6ebe971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-phenomic-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f4c4745595afb482f0dc6515e23f1516a7bd488d331f920fa0c70fa7021f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-nodemon-start-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c515778dd4b1e45430397088ea10ba38f578baaa4025eff0908a9a5190565cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-firebase-magellan-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3272640a822971de3458ad97504ba57f301f6d6bcbda1dc1e4aebad0245e47c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-hermes-epimetheus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b612fe95675cbb0a0e6f234cde2ea648298bae877b8ce1e7502504f603be40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-spica-rollup-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ab0d0aa7d82e6b2a28fae89f185a2a5526402ad2a1dbea6452deefbd171093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...