MAL-2025-149297 Malicious code in wasat-procyon-semantic-ui-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c618454ff76cff11e80437fb251c750fcb3143a8744cbf519a2690c43e433fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-geckodriver-element-ui-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdcb4c250a746096bf08c2614533edd41b7fc959a5b0076e9c614a1a1be597a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-node-sass-leda-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b532c53d3667571b50126b7f8df59d25d564f7f2f526e3f6f2b6dc5917495a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-markdown-halley-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7abec0a1e0d1bd6e1a3f5a47c0ff1c8105d1d1f3a957783903b664a226c7ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-mensa-cypress-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d753751860507a77cc68b0c83405e74048223a9aad75308e8a43711b12ff1817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-despina-cypress-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876f992482e8cba478ba41f7af3818b4d168fe9f3409b584c8e0272b2d9689e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-unuk-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1447c5e950f107cc81a6fe64c2aeaa1436875a0f78d40c72824ea7479ca99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-antares-acamar-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4be9703bf4d22ebe29e9293640c00a146c0161d13f738861168d90cdb9b1e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-sedna-jupiter-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d988154295648e02e90f8606fd114f1c15ce7f2165fe2b4297393c771b18ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-socketio-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef5d5abb2d508516bf2f8ac1a140559e9dc5f585e2b79eafe1e8f3443117745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-corvus-event-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6634e6e973158deed32f962021eb150569df92258f47d2f426368fdc00e9b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-io-callisto-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e34a4a273f70ddab96ef9dba67cc8c2ea71e655a6a12b591757054a7ccab894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-halley-adonis-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49800a339e63e2f06a6f4c122c665e86c4094652566afaabe5ae0fba35868a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-yonder-node-sass-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b951433d2aa9d6be0e893074510f1cdfccaeea107a57ae55eae5f9fb22f25b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-yonder-carina-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658c777d4c5fbd6eeec4ba4ee96401226fa8dbcafb49f836c59ebe0d8ef07759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-pino-pretty-meissa-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219c9ebd95a6895f7ae3b5bd30c7638974e7c6d271ad994f045c9ae4e3770967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...