MAL-2025-143307 Malicious code in hermes-child-process-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145839 Malicious code in ophiuchus-rest-pyxis-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b7500947c13f7570bcf6fe144a0da3824389089069c1d4651b017b265c190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149242 Malicious code in vulcan-kaus-deimos-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b454f36da9906e57ce0e664d3210736df3659cb3a5ef33e7f05864eb97f2067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139517 Malicious code in apollo-jasmine-pegasus-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71845ac8cf484c8fe99a1e0907d4ac0bd2d26a7724145562d9f8007bcf0f8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145187 Malicious code in morgan-release-it-umbriel-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e3a7442fa158b3448186041804b991a98c63c2e060a0da1051863fc9ef2f804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148725 Malicious code in toml-version-docusaurus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb161afc3d9dd4d496a79612aec44fc8f74b2108cbd00da73462e7be4619981d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144704 Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7617a5dee3c988740b307aac4e4479554aff7a5312cd6057e19a9803e588729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147400 Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140847 Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-ganymede-janus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d84855f4774d7e9b77b3a1750e1d3b87f1210412e2f75f70e5024ae188d902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-antares-prettier-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33f258f0bf65bad6cb0915fe1fb874bdd299bdd68df3a0c25c770b672846ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b194872f9972ae698caaa2de3e7002b21ee196dca833bc5546eb8a1e729b361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-react-bootstrap-dependencies-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353beecfdeb4819086c6f961d70183613dc65b776ff461dbf29613f8ab84a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-express-prettier-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3469381f893205a4b4ef707f791d019e2f28b71355022db771346399290b307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-orbit-uglify-js-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60f9aa94c69a7c37a8439ad9a6720c7eafedc05f15f696808ea15458f28ecb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-cosmos-soap-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbe0f54fbc6915846fb2b13a32feffed132c1645ae6588717350c5848deb52a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-uglify-js-version-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31193f251a950336823c83c49adcc35a2cc3615550b6484a164e03c4c24f51a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...