MAL-2025-143561 Malicious code in indus-child-process-apollo-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 907068498ca83a4f322fa13c07e12119461db1ab2f93983dcb53f18a4a2279a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147975 Malicious code in sirius-rest-atlas-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf9c3a8be98e085596d912e2d26f66b7541cabe171e657f3640996ee2f23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140678 Malicious code in changelog-prompts-perseus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91b5099c9a1d521dca15770fbe00e3e4b5209350710e6d696c2a710094e4a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144445 Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b262ab41535744cd75ba2de51356f96f98aaba5eefa0ddac512e45ed9ec33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143325 Malicious code in hermes-request-antares-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5735598cc672f8656c24783449a33a750bb3c27163408675778eaa624319e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147441 Malicious code in rigel-tailwindcss-electron-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77df21c4788f9beed086cb88985b131d710bcd6382aa8167fedc0aac70f5366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141363 Malicious code in cygnus-avior-perseus-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b4880b9d02fdd73016760d9ed188f4394d5b3b0cc2c17e4507049459299210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-mui-nashira-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfbe44374806e35c00fedff0ebd9b6fc637bf9c75b8e9ac317ad72610784140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-xenos-command-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec3c3ef11e14e50a517e63caa9aca355427c437df4d625dc2d40a9c70a4b22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c76cbb410313e8695796c355998093a7f80575a0ef4bd8350a10b4794b4192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-terser-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd32bf25b58a06b2a70d39b030cfa34a19bc7b9c33000beea84c94963d55dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-telesto-bootstrap-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8e9921872e0584a4359c709971f101c91881e4b879963244f8b683d3c58d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sass-loader-supervisor-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7b1e210facbd36613bd9c96454dd87c2f4600da4d05b499d8cd657036675a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-enceladus-passport-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8600d80a5e72e3449fb03483c9e38e7860062aad43b05895d923cbe105018a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-oberon-pegasus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef64ff1bc722482830eba161032dd8841a2c241cdc58316dee04dd4f0048768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-cygnus-xerxes-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96013be0a9b989664f32102abb74dae104a662052a211d401ac5accd685b6218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-slidev-dotenv-parse-variables-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e91385d709f1ebeb5eb823a58d2c7ac5ea313806b2484573755491b88a2892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-dione-fork-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1612606737bf83d64a4d1b8b14f9485992572bf4885bb0055fb0574edbe4f48d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...