MAL-2025-145140 Malicious code in mongodb-server-yakutsk-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dcaba764b7d0683fc08db311198f703cf88073de862611d3f71439e3a4ded1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-phoenix-proxima-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b3a677d59c058e2af71eaab296fd60aaf80c2a9b6c75c08e4ed608913f6598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-mdx-parcel-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d6a19028e86bfb9dcc6f5f0eaa284b5bcb2698b973e93782079cf771658fc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-sails-perseus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54d6d3405988939147e15ad93363602512ac312efbbdb733e39a2f217639f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-hermes-inquirer-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b04495147b6fa746c0fe38e9f928b8b97779d92f7e16ed600a62b76edae78a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-wasat-deneb-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96a644a34551423aab6177cdf5b0e4f9f3518295d29ba3e44f828630f3daf27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-meteor-nconf-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30fcc6b4e7d9a41224029e4f0c88435e1ea06a37c80f6cfa58bde9de0959693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-atlas-ophiuchus-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cf5a6cfe972b72ebb9d35d0e9dca13f2661913f52206351634dd057bebb6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-gemini-epimetheus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4658177041c44d49b680d0bd92cd711a79aaf208deb3a59cdbf0279af0d5e4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-procyon-rehype-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f341d2a974fc570dc7f1c47a3322c6fee747c68d8ce6c087f689e905325a6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-loop-mira-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8504735f7c1860b4b37f147f2c23fa6eb65656ec17bcfacb50d61c6f446fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-miranda-iota-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb652e8edd6e45f3edc03a5a3cdc6e3175c55ad095fa5a223aaf9e27be71c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-prettier-stylelint-cassini-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7d7f9c0fd1b00393d1c29dddd7ab758da9335053faae90b4cd6708d3a72657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-tool-yakutsk-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c0effb2a0256abef9be447807820a92f6a217ff205746c6bb6f8a00fd7565b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-castor-await-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77705b3475b64f9c2feb49b57d114cb8a2433b79f6491f7a30c291524c61c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-remark-titan-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66bc1ea42bc98642c4ab4324c7848b4233721a1d6d28ec5e7e7d4559a5095a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-react-bootstrap-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7366c6b2b849d14ce39d70c33c2606bc5ee97e6c0656befc2c46757026a36cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-elara-draco-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d02531fca99bec533cae3ffbff32de807805bb87a92ebfd783d35ddf8013a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-async-dorado-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a64b7109b43ed1c0f9e482fa31d66941c4902b2c0b896b79c946b9f4802507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...