MAL-2025-146185 Malicious code in phoebe-triton-parcel-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8372b0b0a4a35d0ca5d0bee3fc0d38c81f4d15095069255d4921454a2bfb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d35351e2e3b1eaf852726b159ebfe9175b18a5dc8d25b9ed730e6f7b27a8103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-got-gatsby-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1c2515faa0661243dc07aa0921b51680f5c2e85108869b41be9125f94fd56c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-gatsby-carpo-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7633966de8775550897762e490bf07feb82135625f1b6c5529663e41a0889349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-xanadu-mocha-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1df3b3e4895388627bda6da43b31bb935844f403150c97691e61c85dbdcb65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-mongoose-protractor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da03fc5c0bd9e4ea7622a6c29059265a630fae7403a1e904ce875bc56985f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-google-proxima-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4006ff9461391921d89545f31a28eb6b57e4c3a88fd6672ac61247b99137b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57077612de819acf7cf711556c614e951a7d5f2f92fc0d3c785812dc62b803b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-despina-xanthus-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94066a462de6a40ad0b3d6847519d8baee54111207505b5664c8c283d362ff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-hydra-hugo-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3356433052edf0929bb0319190aaf2c242a761080e1e2ea7ffaf1cbd44dcace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-global-octans-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0994ea4815ebd11f6226078d9a6c346e561085e6173eb701091797e4908a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-yildun-iota-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b73ce43507c72532e06d369ad78ad66dcec3bac05ca084311645fb9741df428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-build-cli-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1914c9e4e7618352f9b54c4f7f471567662ee798d1e82657b53a4cee766b703b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-cordelia-winston-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56077965070e889a1af0696d7fd2581636da35f3c26330ba76f8a3b70135c568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-gacrux-bulma-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4181aacdd872a8c8cadfe1311cec3abb2ab56bdbdd2d394d5178998e429bd21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-dotenv-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4bc932434479fa4e81f262b0c82cb63b971801af78eff50112834c003780c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-prettier-plugin-markdown-dotenv-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2d658f8b51340fa2613ed1642613bc96cf0ed9fedc8ea3dc4ca392be6f3472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...