MAL-2025-144720 Malicious code in markdownlint-antares-development-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159246d8d4207be330eef63c7841b4101f0e806190d6bc45b2344c63e20bfeb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146339 Malicious code in polaris-eslint-bunyan-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075381e94b557c068496fea2af11a3e089cbe86e465828871771f905a71de889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143320 Malicious code in hermes-publish-socketio-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbee8924bf1b70d758011a04f96cb868c676ec29a65a31ddcbf9d973396b57f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141708 Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jekyll-xerxes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1705ca9806e9f300c9c1ca012b4bb3beb9f94e83288c76176704730d08ce77f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-capella-canopus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4536fcb69a0fe5307fda036394faf6d0557525327bea93c51233687e630a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-hercules-altair-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65926bdbe865796f96565dd39277e69038c1e0b4b0a8a26db6c63593faffe8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-request-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11fe39d7e45a17cb779900738bebd70482b33fa87aa5fcb66d39669a64763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144012 Malicious code in jsonp-vuetify-enif-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0995bf6278c3b0cc799d6ef007365cf569b167a6083a421c0225b1dd6d0f8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149413 Malicious code in webpack-wasat-pyxis-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd09b6ad20379082e0839be824d7f3137181fc436b825bfbfc5b4d34d841fe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-sagitta-public-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9486da0eab8d7a0b1571a979e39d9cc7458f2cbae2f6fc67958c37e403b7af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...