MAL-2025-145395 Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-karma-eslint-plugin-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82b35cb990310723ae4204e042fc5cc97154cdd0ecefdab8891a6115856c2d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144645 Malicious code in magellan-levels-cosmos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957abab5443e840ee76b54749ad669129e27ad532cc338193f5a7d00b3136e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df07588139af13f8b920c87e78bacd917d9829ec1b3565249015c0dfdec6d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-andromeda-indus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c748107942127c7c1d160a9a483e68ef0f9a68ac202f5da185715afdbcda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-lyra-io-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2254c710bf27a87896d8f269b5f70f1471cab7d40e0d7b2a737b816fef155d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-publish-miranda-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedb5c0f39ffdbfbdd6894a3a815e5b6a42727a0a768cf1d851ccdf242dc328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145977 Malicious code in passport-barnard-server-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fcf20659588f41f80abb03c011da01e1bf19d78058387446b81977e811089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-magellan-sagitta-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daa5ca770f65cf9f926a2a05bf541b135aeca414fafdefcc3362e1a5941c1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147744 Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-transport-resolvers-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ae256d0bc9ee4ca201d3790838fa96e379e70cc3ede5fe9e7ed844a7513d67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-graphql-figures-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb47f0ad8eea6799be93d149bf247a1a3f8541ebc3371cc72f9cbb3e8c3d9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-duplex-gulp-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f7807aa7c6435c31a3d0d34040eb0ab2219b565b50c93fadaaefaeb2f85ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-jovian-non-blocking-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f63cdbda71e6348e3fa77a13ab444871e387aa663565f05d8a08312ad11fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147629 Malicious code in sagitta-webpack-karma-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a292850308a455a38f1dd6bcfcc0ff11ffa9c15f7cb817a8023b7dea243468ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20488f7b96c14a7d14e0afc2ebb7f50a71666b0fa8b83d4f4b59ade06ed380fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...