MAL-2025-145407 Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-unuk-helios-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4494f554296131e81f71e10c287e9872f5e5f8d04ec26052b06527d853f2d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-dotenv-safe-elara-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504480b3893cead11dcc82daa37f6b6ef8bb2861e471a9eaeaa0c85d0b6cc159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-development-meissa-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0cce58ca27bcbee4953b748ac079795ae9012a13e66e88460614385e7f92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-subscription-zenobia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f07782358ed6392ab262a9806120581fa555e342a3a1498ab8aded398757a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-spawn-cypress-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae82df6c0904e1d398642292d37195a4b1f7ea5bd2ee48bb238ee102bd3b28ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-update-tethys-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea68645694de9a182b55de9fa8c58d02c1340608c7676ac3400270fe913aa2a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-altair-got-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-wezen-jest-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b4c758bdd6994f9f7ec62f125b619a3dc6ba4f6b7a8534103d898a9ef24211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-carpo-vulcan-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914086ee51ae4563ba23073d07e35f8b705aa241802887a976ff6891c372670f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-ultra-spinner-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4385603b947c7397e51d58aac7d7b05374d2f684bdcdbcdce3dfbe0deecd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...