MAL-2025-148630 Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac4872e3209b7e770135a6ad29adbac00c7d4f90525555a0e3aeb4fb833a1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146767 Malicious code in public-prettier-deneb-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c59b0bb14d32d33de09caf05e26a206dcbb29d38932d052a6a0e71ae6569da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140688 Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-bootstrap-draco-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4026d3b059ea83042ac7c4e417f310271161680afdec2181530d17ebbd4f8825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-perseus-aldebaran-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04e115612e5e5581887e57f29803ec3a83b640b1e7c212fb79f0b419f3d6092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-halley-docusaurus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d77f91933d8f70b7ca4a029a64dbdd0a7e896c422835d0692d1a2158a1f51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-cressida-schema-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97b597a54924e516bfb5b69ff44928ddeeed69b30c0374a6d0e03181f0879920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-babel-jabbah-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa1c97be0276477461e2b003057f4e307e1f5b0733ed1795be8b28e0ff52f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-halley-eclipse-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92aad2c8661c92e2faf142d7e97db55b4c9eb503c256a5cc5aa3b8c84acab377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-delphinus-yildun-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ea65b73e43a4a6c156e8b48b018e43fdc35e2b28a53421881ee86e87fdcc47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-loopback-update-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b312fa8a771ce19d92893bc98acffe14f93448254dd749b876ff74d95551eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-loopback-jovian-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b75b0fa3e819aea9c2aeaa0965e6cf53c370bddae1dacc9fb0fec107471d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-xanadu-delphinus-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce970d7707c6bb12f8768ed4836703c39d4aa3cbb4a0df0c586ec0d15d37b23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-readable-dactyl-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3fe8fba115d5787ca57c1183f16a661fb0dd62f372ba2f47737309bd8cd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-dynamo-europa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-auth0-webdriverio-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6859770119a4e78a30f5f48c4be3a5d007b88f48d81094e3471b635972c0f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148141 Malicious code in spectron-webdriver-start-docusaurus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1aa662d0754a1dc188e33dcb602068d7a09025bfb691ea96cfc640e576690b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141899 Malicious code in electron-builder-cz-conventional-changelog-markdown-pdf-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a391ad765701a0afcc4bd8a62b5e4756a8273e7459830e66eed6cdd93cd2226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-nashira-pulsar-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34b2df3d4a4995a17928a35dfc555917a0dc66c1262a3ba9686778acca2a992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...