MAL-2025-145958 Malicious code in parcel-europa-publish-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a09bc38436786092d99a19e3bf9e0d03927398fd2aeb6347409e17722db57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-quito-electron-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8537ea6cd46b2fb0b9e192dddb173edc80c3c0f12cd7f312f1f3eef1d4ff4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-supervisor-phoebe-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f56182fb0508ccdcfa89d6395ddf24d4f32bb251f2ace9a58c29d899b8d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-meteor-frontend-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1f0cc1a5f9a889bb9d25e3c44471dfb495105e55f34256120a75de091f1531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-umbriel-jabbah-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217a3470a4faa8cd8f45cc9db7f1cb2c9a4c9c6119b0954169918df22276ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-schema-relay-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76671588f93dcd3775fb5621c6845d8a99c2909349a2f0772ff25b85769e7ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-exec-juno-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dff177b9f2f7379583b9fe28210b53975d6a344fb643fd4b7d8e83e33debc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-uninstall-warp-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f056ab6718343f1a83f1b078d53bc6fb1719a925893e09a02b5f7671b1a1c2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-jest-tool-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b1ba67d5b197bf2456562535ef44ea74362f49ab6741457c03efadb057eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-rimraf-kastra-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b55ddb30d6596dc7380f3c8beb99d07db1416b0ea94a2c64fb705fd8ec03fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-impulse-node-config-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90aec7674c1a5524fc2ea92edd26c3a9e2665afcaff60074fe96808a1fc7b25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-testcafe-chalk-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51d2d3f0008db6e091e6cc177cb67d46eb5d7335d782a5b703409653d2bcfdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-typeorm-mutation-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61272cda7f06f3fccb46fd29779e95028acbc6fd37fc9c1f6a0c6a66b9f59e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-cypress-delphinus-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eccad331b7bf36c8662f97af8938cf65348ccc3a67e2274b6676b36bda5205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-nodemon-pavo-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf4fc96b4296cca28d89142204c17c327bb0d03ff60b782c9df68ada21a55b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-koa-delphinus-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320b5b67e6f1e7136417614408f330f0b5918859a73646fc895485d596b3c69c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-solis-aldebaran-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46f2c78e342536e68a4c350a5c3dd11443b5b602f6fe14b57565716a0de7390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cross-env-json-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2776897fa85ee4c9d70fe5522af98d5ad8fee59c900ca63216b4324d8f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...