MAL-2025-146784 Malicious code in publish-ganymede-magellan-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe61d4004710f26cf2fd18a0ee5aaa2712aeac50c0f10a8cfecba3698c8f075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142902 Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-concurrently-adonis-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed366feaa4ce9e3348e269449113b139c4a44915f28fbc73915956991a76e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-testcafe-uglify-js-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e77fb847e27eb950028a1cd40aca131cc9aa67d47344651081fc40be03e6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-radiant-auth-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c2c324dca3edbc341f048c6450d552383477130ac97ab9e58b363da4215c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-blitz-process-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb7ff6204819262337ea539f3737fa48f0b96ac4de62f3f641de134076793aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-upgrade-yildun-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf2e7cc80d7fa5a10074a362279ccba0ce02203d34c01e172eed16f63f06642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-phoebe-procyon-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25727adf9796499061bfc2db2588d0ea8977bae2875b159d01c443e8a78f9aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a246180b1e7c49c62f2f18f439a38315a0f41c7affafa8418bbc4b48d1a8f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-jest-titan-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f4fa5e2efa6b267cf81c7911f6cc457036256039097ea7f0efc376e5585f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-aether-bunyan-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74c9b7b56288393328f2847aff7f758279283fefc2bedfab71788cc1b5a460d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-webdriver-mocha-titan-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb9f36e47eee948dd38ebe0cf6ae2a2da5e5920cf63ac7a40deb44853bfc698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-cluster-react-bootstrap-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5333dc0e57d62591cfef78386ee083234837b5301edaa9eef17a22523a23050f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-cors-procyon-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a2a89b119108ed4e870e27de544670e728a8d329e9e73ee1f8bbd76d6dc821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-superagent-eslint-config-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a039bb80b01a8e851f6c5764e34a238ef14c4f751727a8690e96fd25a5e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145236 Malicious code in mysql-apex-nova-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18771f3a23c620676b417659010bb8e144cd21f20e46bd086c478a0702361a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146914 Malicious code in quantum-regulus-xerxes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14a1f44c2f7c4f15e67c01fa676fe8a3e69cddd184659b61b87deb61de9a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139759 Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142023 Malicious code in enceladus-betelgeuse-nodejs-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214e3efeb5ab890583b8fbdd9950fe8de1f2f78df13e65aaaa8892a71e73dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...