MAL-2025-147992 Malicious code in slides-polaris-version-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf35e9d3704878c92e55276f6c4364b9b7151ccaf75ff7eb6050fd1d9fb18df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147323 Malicious code in resolvers-eslint-markdown-pdf-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5edddf5489e959e628e53fc66c2bd0cffb613bbbcba0037d36286e701a0450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143069 Malicious code in grunt-prettier-chromedriver-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c23644cb4dbe3d6725f5ea83a20e4ec4b24fc724d6f4b8fa491da874661a1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143712 Malicious code in iota-bellatrix-husky-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2973f9118f939e46c373ee35b5c10d61a18a3c353d952bce4928a4ce858d4aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143257 Malicious code in helmet-nashira-carina-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3942757ca6d78d183bd70caaf20bd6ccf9cac9ee730bda9da89573f57e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-blaze-zenobia-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fd4cde87182f18e48fc64a21b8b3a6224f31cfdab55a301fb10c443b934961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-blitz-yildun-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7ec6924a4e3e3a69ef538be213700fa6c9eb4b713ec06552ec0ab4a7fdf741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-bellatrix-slides-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27c31597941ce5a566db60d7d472f7a2811fd08f8476dbb11b9074b61a8d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-winston-rigel-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57818656989f84e68d0cd7543eb5cd75f822505d7833f4de2347d782cea86674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-sails-perseus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3781b66f86852a017c7d3785175a035c8bfff62de65a6850dee7f41c67efd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-webdriver-manager-writable-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912021368ecb1501d6500bc85aa33d7f26dd016c69d92182789f990c2a475792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-superagent-hydra-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4642c3f8ab7d248da3daac08d7f2f06935af9afa6a749306e9b8fa8707d54c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-helios-nuxtjs-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d011b06489abe320d03829c7aeb72ebc9c37f4a034533c6bde985f438dae83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-europa-norma-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a1fc6ccad57d3555ce37c8d74db61a1de6b6ebf80c58455ad362ba65edf829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-rocket-vuepress-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eb8e6b2794182f84ca60ac2dd4533e6e10d51086559a89fad109487b8f4d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-meissa-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0eb4b60620a7189a9a4bc23c417244da08f5afdfb4839b12a5e386e93d14ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-virgo-cordelia-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e07b7ec5a3ebdcdcfced2c14aa60be59406831219a126661a9b616532b03b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...