MAL-2025-145600 Malicious code in non-blocking-antares-configstore-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74bf3571b0999a8ef8c8705b0f31f623f8213498f18aaff113a2f2fbb2675667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142291 Malicious code in europa-scripts-betelgeuse-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8758ee005ea30461f9a67d19287676d1bd1758295212a07c48fde2f07926de95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145853 Malicious code in ophiuchus-yildun-centauri-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfef0efd2ab36909c134870761c4a8cc9e6ade31076e09fbccc65c28fef81b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147260 Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148387 Malicious code in superagent-vuetify-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3e180e9f01360ae15a1ed1c0c54fcd8e78edcbc812170d9b376d7923c62c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149210 Malicious code in vuetify-fornax-equinox-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5529f7735a79897751ccb1ec6b14b80cd2211f4385b705aa95822ea96af2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148396 Malicious code in supervisor-lynx-enif-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7927318322d4ebf3f391128c73ec470be85f97f9dba951ef1ddef5ce9461eda1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147279 Malicious code in repository-phoenix-altair-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56358002f8c5f94fc9121e5c7eed6f83e3b6ae720afe694721b04db71840074b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-nebula-vulcan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fb43d337f3d549421664d53fe2d3de498727cee05007b2f16093d683b6bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-protractor-jasmine-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d73c1afaf67150e6e875b0b19c55324ec0f1f80da7f11faf6ba94f0922351f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-yakutsk-hyperion-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534ca0e61257cfa29cd62dee33a04665382cd6255381a16018d3b0f297226fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-sedna-postgres-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4ae7421221c3621bd1f9259173e3856dad4eb9b6e93a829e7fc51a103390dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-warp-mongodb-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06ae7d6ff6aabf0154b5632ee77933718e1f2d084a2c285b9fb72e9b2dcdbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-remark-impulse-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8797ae87a898fa85038f9a2cd5e27df6306a878f0ea09cadf09c148fcb7532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-rollup-dactyl-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b432f0b0c2f9f89aea56397185205c9ac09c7aba0ad4d26bb0190b556c801b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-tethys-perseus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef082d3f916b8d6e7affb1ebfad75ec2d3a3c8f474313eb8bca82a69e1d589f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-webdriver-mocha-apex-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe798d5eddf4142a4c6e214c64296966c3cd3c6b53dee277bbafd5cdf8c77cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-rocket-server-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202c25aad9abfdbe4f7b790c02ab365ed6126e7de8229a8157f48c9eec9b4dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...