MAL-2025-144734 Malicious code in materialize-await-equinox-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b788c7f73eabc1f4be55768daabef3d611044ebbe93e7a4baf4947708b24a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-webdriver-neptune-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfd834cc94f3d97018894b7ada929dcb9499b32c25a4f8e6c33026068697ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-io-betelgeuse-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b7ad259d79486b5eec821e49788722b5bff497f8471dc329e58af138fda0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-typeorm-jsonp-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a937ac555dd0194b7f6f5ba5db28bbd261412ec503e9a23d31fb3992b936bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-got-corvus-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5e498c81e00b302004959da9d5dfafb435ea456e7f6d839489ef09f645ffba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ignite-protractor-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334271b13cc7ad7f0e2a713812ae5f4c6b992d1b0759a6dfa57692961ff0ed57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-process-socketio-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc94a69e8db13868ea7b35d2460be71bc2242a9b526364d04b255093dc4a7037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-package-tethys-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174b66dbf76fb664cc59ea69deef78d6bf12640a1916ef82cfda94247d890896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-middleware-wolf-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab43699bf0436caf664910e6f461b70bd8b0741fb747d0d7ef3619ee3509c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-neptune-hexo-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75b69242a0d3a551a4ece24470a94fa434599d54aac33ce7b8b2a54ea05645c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-subscription-bootes-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ba89f2afe2abd83731c67d220a62e287593d581993edd712cd5d34c8dea79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-ignite-less-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c288fec2d5387765684208aa7cf6ecab742922ab14ae5fed28c8176b4093ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-umbriel-jabbah-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217a3470a4faa8cd8f45cc9db7f1cb2c9a4c9c6119b0954169918df22276ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-sagitta-react-bootstrap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b756af5418b76c87b1f10fd6dea75fffff7258a94a050ec1566ff5d8e2f81a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-antares-terser-webpack-plugin-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621360111310bb1d7dcd6fc7f22631c95a9ca27f7eed5e0424872f4f863ea333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-achernar-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c25a04d98cb1ff32a8ed86064410e8eff0f1de7c3b742d7fd02bb1db5f63b962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-orbit-bootes-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2f3aee0366b8961da6c68fcdf85a8a959fc9725a26442353bb2f5b173161e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-vuepress-nconf-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3fad2a7701e8e70e72d43cee4ad37b3a44e2bbbc521f2696eaf92805c68b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...