MAL-2025-140860 Malicious code in colors-procyon-materialize-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf32de71538c5a3fc936507de3a7014c69435ee1c7ace63acb5b28f209849a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149668 Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142198 Malicious code in eslint-config-event-convict-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f446aaf24a37aca04db5c7b3b7a5018dd7160c69c812dba273d37e7bfc1a947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147893 Malicious code in server-despina-polaris-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc1fbb618bef532bd29da3f9d50b1f8124737494a734f5788fe1ae1d924b69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142764 Malicious code in gacrux-eslint-plugin-link-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8275253c0c44cbd7897a87cee97aa026524c4d7ca5c3b7dc23fad43685c1dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149267 Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-auth-phoebe-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfbd33ef8d09343b29b29d1cc9c4e472635fd9859fe1f3cd31e3d8309ed58976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-stop-fork-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8f85fd8655a595a472edf9de22c502004bf3992a2e1d4e481ca097860e48ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-init-slides-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5365fb7829cfd8ab509782ae75c027abe5acf1c7227250c2f9bce12c2c4d1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-jupiter-bellatrix-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b4aa78ed38b448c61f33a100a1d5b292882f7610f939120e76e54d75b9d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-csv-sedna-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17131fc8711034353c5ac3b56eab7429cb6eeb40cf5fd656151de8fabe76580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-dynamo-sass-loader-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12dd3905e769ddc09355e980f8010691eb0e3d6ca5c551d5e33d582b98791d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-adonis-duplex-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38792fd6a11ea8ef7a64db75341f38038e26db247eece3461d167c909c7481f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-cross-env-miranda-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70f7421c90393fb635169f739746d14f59bb6253fc140493f6103980b4d869a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-vega-xml-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf5930561813e8034bf3a62617cd99f9c8522d2a4e61604426d8545cac757a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-husky-gacrux-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e3d4d871f4f969cba5282084ba6d4668843d298314b57516e622809c5616cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...