MAL-2025-142828 Malicious code in ganymede-winston-enif-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5f05b3b4884fda91ed4e5b87e250c8d1fd333f9772b5f001db3a8ff25f07b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chakra-ui-acamar-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9804ce70db2a76211a21007dfe8f7a24a50604bb846a42933064d96c23ada4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139866 Malicious code in babel-kronos-xenon-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988a66c3ba1a6bc9328e037a05ad71e1b27b1b67bc84588f07d01976fe818403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140268 Malicious code in cache-chariklo-gatsby-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922d2552b4fc45a9980f353493ad012a5579a62b6fea2ec12c4de27f6169c5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144260 Malicious code in leda-cassini-wasat-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe536149b5984d6f38d2e057ecb9354817629b3760fd434a34a929598c89dc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-unuk-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d1447c5e950f107cc81a6fe64c2aeaa1436875a0f78d40c72824ea7479ca99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-async-yildun-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf94953e1f164d925137c34e16b94d8edaa0cd00ff42194777b4f06ac661267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-package-apollo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629e16768c84e6856bf6028a33cbfb8789a89d5023aad21cb7224dddd26e1eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-oberon-halley-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af62a0e9726a0d93c7beb487a2175fd6dd836c21b6b0fb9b04a2bc42bd7fe599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-quantum-puppeteer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0001b5e1e083b4a1f3972c69957ff451588428b9242c25d7a98c437e15664135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145875 Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-superagent-electron-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9f9a3a3caa59049096a63d8e9f999c94003ff7ff78fdf91fc11d71097a025f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139609 Malicious code in astro-izar-nova-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b583ea4560f220551e95bd3c98bc2ed79453362f6bdc60b3ea7b69cba8f1cf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-despina-cypress-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876f992482e8cba478ba41f7af3818b4d168fe9f3409b584c8e0272b2d9689e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...