MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140126 Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-hyperion-chariklo-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb0574747e317160ee377a0984d32a00b5da31f25184452bc5b52ba40041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-helmet-dagda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3261cb1f33e1f0746cada1e1ec1fd231ff24c1002066248b2efe40915d70ff48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-sequelize-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c7b357b282c6107b66be25d25844369b3d99f701ca4c7acdb78e404c6d9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-electron-adonis-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f40f9fe8761dc42bf6fd3e50302ad90e802d796675c661e1721ce13f5db58e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad1bee846b0039c60e0e0057b6c29b031b648b21ebbe632243dafe96452cfc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-neptune-mongodb-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0c9e74444c902e017c9e52faabf35b6437f9bdb1cb60b164fa400e544a15cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-css-loader-luna-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7654dd1b4c19ad5a052718f02b3a1ede2bb71de999bf5a77617045d18190864b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-nightmare-perseus-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddeb1bc1a009697c0a34a92327586e0fafa7ac89a758b39af0e3d7cfccb123b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-run-script-scripts-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-hyperion-chromedriver-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f0cb38df1a8181ec17f4e0a0c4f4e5d50074dc19faf9a14da0603b416ba956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-jasmine-nightwatch-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-pulsar-bootes-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f143c148c7e4c8e2bb84556a6a8e227304fefdc3d346c1b959bf9c04f6f75559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee6b53e9ec9c7ca4e8ae2677ff0aca09ba263bea30c7f030cd59a350bdb6015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-postcss-dependencies-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323392ca38cfedc4da56f983f855457eb4db40ebfc12a16fcb2918fafdef571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...