MAL-2025-144024 Malicious code in juno-elektra-tethys-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd6a416be129d48542f77dac831defe147dcb7b21c8048a07c1b70bcabd3b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-webdriverio-lint-staged-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d022ab1c45b9bad09802f9c4a3fadcc11d38c388780cfc540d7dc131bc3bb3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-zephyr-ini-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18e617feabe02c7adb88f9c7048518363df681d49faa6edc8fbb622dd7f5d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-javascript-nodejs-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a17304e2a6bbff648b6d32463f834700b906ce3fe91ce25015d40c032aba0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-child-process-algol-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee989f66e1b782655eea49ace8d232ca5718d86a06908628e76997e997f869f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-config-levels-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dda37d8300529894192d4550cbebc8d45b72b09020b658596425e04f458a7a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-build-development-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a806dd95a5e6b3269527ab019eececbf5dbde8ce953c2f0a04ea6db7460bb15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-eris-perseus-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a22e87f4346aac0c818fba277bd7c8ff59ec620b64232a4da60d0564e6e263be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae6e464d4d807b9eef9069ca788254eff0f8533e1006b633e282f18e6af6ef0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-commitlint-norma-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf4390bddba6c156cdbddcb8d6bc99d4da0ef1749ac02717b10d2e53803f68fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-procyon-bulma-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0a40a496ba5fb94008da2fc5fb151c661576d50ab42c5af6f8f0f38c01356d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-oauth-postgres-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fef32f3e136480850ff99e1aa728eb1ffb82d2991e40aa84ce8cb096277e1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-hugo-hermes-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1214df154058bf8b9ff26ea1d90732fb3d0d8f7a49008ca86fb3a19a49be8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-meteor-chromedriver-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33eb4d562c669c05b1e28cb2ae849a179412bc5bed948bd6a294ab59ee6fb4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-toml-dotenv-safe-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0747b24bb674b7b1e316820fe5ce023f2fb526a9a31a66e4a17aa62211ed6682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-enceladus-tool-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898f056a64a19d29804f16a6af838eafed5068c61f03058b67169162f7198c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-dagda-winston-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896316fc7d2ff80226f0bb3d262ae8bed0818fb9a42f3d7bde21fff4fcc37e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...