MAL-2025-146977 Malicious code in query-scorpius-meissa-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039f8688ed4618719306a36c9e5c803751ab0b749811306decf282c7cdad2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-pegasus-ganymede-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65afe8cfd85ae35917f7bd628db75ee6071d0dbee2b3c66a8420d9dcea9117b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-antares-rimraf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93627bbc7ce4a38b5911bffd0a7a9060f9c39f63e3149eb715967d6cc7c40e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-tethys-vulcan-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ac2564f1d4f6443099497e33d138435f66b50f4aa973b0c5768985c186d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-global-docusaurus-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-hermes-package-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30ba28e1dbc4cabd7ec966be39af97ff046d7a35a1089987eab1a33943663d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-izar-subscription-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8681257e1e1eff9e0b4be2eb9aaee7190c6c99222e20e0f2d9e0508d2fee6c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-carpo-enceladus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9631a095d3153517d02bcfb2904010b8de2609252d7d52ac4ae5d8876779a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-sass-loader-ursa-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675c72de8fc9a1ff74caef36b7f6593e7d48d1c420b8d2a3f9582ae0d251e2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-impulse-taurus-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850868fe58e6020e10858740e633ce556373271d3b938b08887156b35aa68833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-phoebe-auth-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7249e2942909d5d7c6b7debcd3e3bd438b8c5c51d5e1402a279e7c5b8b434d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-fomalhaut-postcss-loader-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31c29c2c964ade0090610a05400e3b5e75c13d1d4a58e13bfd5325f5bfebf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-css-loader-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc9b93c027937183923cf0c75079a363eef9f31123a01c0eae6813aea03b2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-achernar-nightmare-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f07447b95996044d818408fd7d4494a3352f8ff4efff391f36f14aebed84e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-scorpius-kastra-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13206989ca281bd8486109bca034dcd43687f4928eaf2c88002dbd6dcc613c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...