MAL-2025-146304 Malicious code in pm2-odin-carina-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a58d80ecd946ce5e31f29fa6ac0489e812813dc38545d7d78e46a43a4c97e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-husky-development-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d107cb18863de80dd63b661d6601e6624f0bf076d8e8fce190952de982bf17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-betelgeuse-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2154045e7fb54a083b9029a1dbd9999c466e2d28e5a016fdea509f93c03163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-wasat-luna-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecd59731081ac14a1d7e6bf85ea26c4a0b8aca42f3e976b461463c99dc87512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-dependencies-metalsmith-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae30710522f13143fd61006a6137f7c9f1b8a00a51f277fb5f02534ce8037f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-sails-yildun-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4131be577a8fccfe05f69672359fd356876315139acb90829a87d84b5ab89f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-magellan-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3558b6b1a1972905e34cd4e0a792d129eaf18c22c5621bafbe2d68de82f493b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141837 Malicious code in dynamo-sequelize-hermes-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e59e09926ad401601fd6a02322162da69959133ab0d2524b3a52697d3929c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148999 Malicious code in update-markdown-pdf-pyxis-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7ea5cae85a41775934cd115a39006333c25adc53b2eb9ab24fa32990648c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142985 Malicious code in got-rocket-build-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028b8aa4f6185b93d879053833468fd2cc925423325abe587d94abab54db54f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-bulma-polaris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692d8948eee5220a89db98305c0c5b8563d44e1e8f148eb621bcc3b1f6e1b915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146416 Malicious code in postcss-magellan-ursa-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce8458ed2741ec54d9c40e4518395ab915bd46356a551b9e18b8511ef6e3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139016 Malicious code in smoggy-lime-trout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53897c4ff35fa4579e29ca086d5717918f25b29a030ccfab161c605dd9822911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...