MAL-2025-142669 Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-halley-despina-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48934d339f8bef386426802ada777ff1e8a39e39111d761252b18c165fc55ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-css-minimizer-webpack-plugin-testcafe-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3434db300a24a4a310c9f954e2c6519a8e6b015daeb915d719dbc60554f3710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3139efe2b8fe49fc17c17202dd196338965628ff711b11f0d0b1c4e1727266a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-cypress-nova-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314605ac8a292040082df3767736ead396067f88d0193a18f4a19f922f5119f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-build-ganymede-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca854d6df3b48be4282c2ab22c37905502a03ba15db1d06cb12e79768d8d2b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-uninstall-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c9482de78b8db351be096255e8d470475ac1af6f9f421925c5db2d0e149ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139508 Malicious code in apollo-elektra-bellatrix-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4571e223770be66c1d9123e17f3212e244d541f4f69186252ac67fa294deb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-google-venus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3ca350cc2d89867e35e9712945365651243ee77bbb151092965b2539e17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144854 Malicious code in mensa-halley-bootstrap-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea1a18f9f0dce5f00570338378868ef126968870597e34b985e1d8bcc4b1bab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-jupiter-zenith-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195f7119f79b9010d1b15cbf53b4ec46996086f8d87b6c15ed3b171a977b0549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-remark-csrf-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c25189b3a691795423dd2332b3e847b1d49d056a1fe6b209d2b7b7e86ccd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146215 Malicious code in pino-cz-conventional-changelog-sass-loader-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344b9249cda2bc46ac84d6f3e4f087d1f9b8fd5e514da9218c25f6cea354f194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142362 Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146610 Malicious code in procyon-perseus-hermes-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bacb0d3293d40ff90d010115ce5b01cd474c2a6af9cfa35aca2abab004ae82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145062 Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...