MAL-2025-142338 Malicious code in exec-enceladus-axios-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a062249bd440e99eeca3811d7f3872670382d064a5d70f13ec64a7bb23b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-aether-enceladus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72ac2bb7e1588639a15767799edb1be2133b975a202be1a2e499f7f41565d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-markdown-cli-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-oberon-mongodb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0201ed3bfdeb13d9226e95c1bd978f463a415a0f7ed42402380176b350640e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-query-rest-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7ddb9154d6ffab0c9c7227bb580b74dbe26895e4f866fcc6479c477cd2e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-test-aldebaran-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd65b09e2dfd2d56ad92e4c1a5d50764cf38a8b0a0eb684846bfddd61e7e2ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-vuepress-colors-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2402ef9a3392a9464536d39559018c58910722a66f3e96b2ea86c9586448483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-comet-carpo-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3105ee9bb6ac739ae73518d846f54ac4063dc0314d1af323b3ed40306377a498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-jest-nodemon-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726bd6f462678ed62b14d8518574a76259ec9497d7eb5ddd9ff6de89b9f8dd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-chakra-ui-wolf-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269da6563955e8aa8cf275cece8a94fa39c1f1923c676949f24a6e7dd8eb9879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-taurus-foundation-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c037b0b5e3cf10f1a69bbb0603617df035d7e565a5da2277b4ee9e340e269e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-neptune-nashira-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91a961cb47f375ed243b7963cdcb585a59ead67e3efb4f59c6066995c3c1b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-morgan-gulp-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a498c5b041add19cd34cff6f6ea4b481d4f6807e31d95256fdfcc433fba769e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-subscription-winston-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee660994a62fdbc5057c92951e6a2739b653f0b4ae38c2fef9fdced410d1b7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-atlas-jasmine-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc87488aa9c8d7ca58ed718addb38c591006dc1b7cbc23c931a5cde9d6d8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-superagent-hydra-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4642c3f8ab7d248da3daac08d7f2f06935af9afa6a749306e9b8fa8707d54c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-global-octans-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0994ea4815ebd11f6226078d9a6c346e561085e6173eb701091797e4908a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-await-ini-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee36bfd0c8e53fb43d60fe0c46d53391c7da51887114e8f81368c57f3dd36e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f72622ee9f60adeb5f780beefca8e1efd2fb397f3f46dc1ae0ab8ef0a1b15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...