MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149170 Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147987 Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149887 Malicious code in zephyr-koa-materialize-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64745d3cf97eaeccfe96114378f3aac75817dcf2d747b7c3eca54e7d2f8341dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146516 Malicious code in prettier-stylelint-rocket-ursa-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5424b489454186531a8bc8fdaec473d76a5c45ea563cffc4e4ba498b961678e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147620 Malicious code in sagitta-spica-acamar-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bd2e1015252bb719f8837c2ef58e6c0dae1f9260d556bf3048de7b0824529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-event-tethys-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5b9b599c3c8e7f60e29a80bca644e5db5e6622c17b4e3d563d11d339416dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-meissa-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0eb4b60620a7189a9a4bc23c417244da08f5afdfb4839b12a5e386e93d14ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-dactyl-ini-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0224b06c2bc01bac122fd5a5ce40190a7a89a36d255ff938537c7373ca12a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-blaze-zenobia-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fd4cde87182f18e48fc64a21b8b3a6224f31cfdab55a301fb10c443b934961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-blitz-yildun-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7ec6924a4e3e3a69ef538be213700fa6c9eb4b713ec06552ec0ab4a7fdf741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-bellatrix-slides-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27c31597941ce5a566db60d7d472f7a2811fd08f8476dbb11b9074b61a8d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-astro-npm-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c647e05dd037905883f77cef6440b9ac81382f0ede90b58ede2e43bfc6a99a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08851659b6a53ea323142e60510fd2ea2215b5c6a75a5928f0eaa11a6e6e9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-sails-perseus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3781b66f86852a017c7d3785175a035c8bfff62de65a6850dee7f41c67efd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-enif-frontend-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cbb11bd1538059fd754625642c6b3a833aad1d0337b86d54315327f193a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-hyperion-websockets-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca76291d113540f0d1d9604ebedb3d9c349de49debb0c7a3d328fa724a726cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...