MAL-2025-144686 Malicious code in markdown-pdf-cache-apollo-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3815f58127f89e6f52171beee5149e5ca18d95ab4a7b7434c014b0b5595525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147403 Malicious code in restart-yaml-celeste-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0f181b1bb1ae9fda5a31bf4d95640d8bae1a6e22c7bb78e99361c16301ad38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-aurora-bulma-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746bfe10c7a977f7721587119712a709e020fe06e8411f424c7edf64978ee588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-spinner-titan-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7660d9bcacc163d4a42e3a4b61caa5d9ebddbbeb182938dffe65d55df730a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-cross-env-miranda-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70f7421c90393fb635169f739746d14f59bb6253fc140493f6103980b4d869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-duplex-postgres-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7832e92751940047922d50f933d84f6178e5b9be8ec22e632df3be4ebb452c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873d88c3509404f2988cf91d1771157fbd0b4779809b331cd37a8c05f53e5239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-mensa-pegasus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2afc3e2aee8b3966ed7531a5d556897d37bc1bdf1d7ad73a0850368bc5bc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-csv-sedna-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17131fc8711034353c5ac3b56eab7429cb6eeb40cf5fd656151de8fabe76580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-husky-gacrux-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3d4d871f4f969cba5282084ba6d4668843d298314b57516e622809c5616cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-nightwatch-grunt-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4fc8c622c7b8c84752409cab69a5ef77d9b69dec185ce3d8c15d43a4c58f751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-adonis-duplex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38792fd6a11ea8ef7a64db75341f38038e26db247eece3461d167c909c7481f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...