MAL-2025-149277 Malicious code in warp-xanadu-nconf-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f1a6f890cf0e2133ef4b2bfa33988c3f3bba177346a6626af0630d5b8c70f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148961 Malicious code in uninstall-local-meissa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555721a317e20b9a35f22afd4a810a69c596a01db3cc09160097074ed711fdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142801 Malicious code in ganymede-hexo-gemini-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e685f3ac7fac4072eaa0deac3e069d06f956e061bbbfd2b1b7c18bed89b22973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-orbit-publish-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a8270fc0017313bc154b75a1fb4da0c00fc8f3d414844927e0012cdd7741f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-meteor-chai-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb8f6159e8cfba287e21e8c7a1a2797408c83744710c77d671823be0b6fa884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-sedna-lint-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e39ba57b7192f42133b9d75ca50578b733c485b36983ce205e871e9a2c23047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-levels-cosmos-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957abab5443e840ee76b54749ad669129e27ad532cc338193f5a7d00b3136e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-docusaurus-soap-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b079ca8f526dbb726dd16f2f2e90714f1804e7750dfce6c0faa824c9bea016d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-achernar-betelgeuse-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4877db2ed8b3a12adcd2fcfb33130f202ce33e00f7138d0c8016693af1e6256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-venus-kastra-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af819cc7c6039a99830cec4ec922f20689dda1cdf403e00756c32a48533001a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-miranda-eclipse-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c4978b95394eacc922e2d4489a6f58e988e6425124b0e7cb87434b45f0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-elara-ora-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2429416003a98f5ff4a3134836901c63b440a91cd3ac932abbeb75e3bd0536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-gridsome-rehype-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3e9d295e11aba56fb8c1aa2464bdcc78ac712308ed1d341483477311ad06bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...