MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-procyon-phoebe-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd52e9d904db9ba9c30ff053e65e5fb4c74083f3e9eb261fe3ef503c47b00105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-apollo-phoebe-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7ee377341afd6ff00ecd3c91d8288a5f071acea3140ec89bb507e3ce438771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-yildun-lint-staged-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcff6df8f297e1827092f1b72e1b0b0fc2247b2491be6414d2fb5a500a1639dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-supervisor-phoenix-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893ee17017d76f2c31d7623927aaf5e576592747cf93d7ab7b484e7e1fa88d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-jasmine-global-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f686c5b6987f2ad2417bf9733e7e8168e25a0ee0b268d6f99281f71f3854337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-got-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e05586c6b012e053902b0ba00d414e28fcd3163d35425086543ce4e5d9ed481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-fork-colors-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722b1123baa765639fb33e2d496f084750b3b677d1872aebbdcb7e20a88f4fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-graphql-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e67ae35d50289396092b8b9b4f7526ebbf1bc4af417a1c237436cfc78ef362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-xerxes-neptune-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6827afbc579f426525b828395845f8edde2e9b43a41a713835ca66836730c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-leda-bunyan-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daad87c85d73df4e50cbf5ae6d7f071b1e0e00f8dcff8e225e8dd160c157a0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-apex-antd-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62bcde48ed9d8284f245a51dade1699959a6c5392b1c8ce1cf1f0aa82067f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-canopus-upgrade-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d09d00e0176b7649356089a99de32bd8bcc56b1f20e12d4d752e062c992a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-alphard-farout-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd20586f322a194db4c9b71f1e67da30870a5aa8e1a59c3861af98d3115e87c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-concurrently-odin-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e725700b52d2456b454b11f61182cf74dec91a57f7e2a4bb09487941480646e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...