MAL-2025-146771 Malicious code in public-zephyr-neptune-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072d15f062054089466bfebb73e1f6dba852a9ff2763e0b168a42e2ae7742225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145345 Malicious code in nebula-janus-parcel-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dc02b3853dcb408378255697f28364b8450c949b8e88a32ddda404c5b41fe9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139536 Malicious code in aquarius-fornax-mocha-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0429d5658b57d37a3469eeefcc63d48eff90681f01f03cd075ebd59e13521048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147154 Malicious code in regulus-phoebe-corvus-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0151e5068dc5bce9091a6d205c89061fe9513c7fc09dd31cd433c06dd39012bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144676 Malicious code in magellan-xenon-bootes-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62df206e0c637e4fdc9672598ac3b8880e4bfc6880a5cbe40eb17ad429a7520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149830 Malicious code in yonder-altair-commitlint-config-angular-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c16de385d262c74c14cb8a9c647ea883875717271b69fd0efb991c16a3679a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140171 Malicious code in buffer-semantic-ui-neptune-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315f5a24d0d94f06191c8dde3f71fc38e3880dc0700cf1c8d94cefcde0b88eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140343 Malicious code in callisto-oauth-rimraf-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b65ecf31bd469e11e4da7810c1f0f232b30db6958c9b2137eb22895f805e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-ultra-rate-limiter-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e8803202850ab3b057b8d390e9e5ae934720a068fad23608b8943a999a7894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-odin-sync-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d6eaad6abfc7da0b2db8e0aa9cb3812e19c577a9687e15a1f993dc96e8488b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-mini-css-extract-plugin-acamar-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53af958770f4ad50cb7b1fa86e408b7c65cf53d5d6044488bb5a3d18fcca5da5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-publish-less-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31faf24c46477d774d93db7d78b3c39311f6669c9cefc0ff371546695dd8b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-webdriver-manager-ursa-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303d9408110a8940c08a0f59620848e069c2d1e006522a4504ff124fa2dd2a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-ora-perseus-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df8d91d49042e84b8b1a207cdd0e65854694438160376238b9ceaaed621a695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-pavo-regulus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ee7bb2a7e4c43cc52bbbeb69fff548fa659baae52b19eac108defb2c4e7b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-xerxes-fomalhaut-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d7390468aada72a572c90368c789b811bd3af07571ca8ebffdc59fca92f926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-install-puppeteer-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724acaff6d5a6ae464eb4bc6952dd230597cc047db7f7a926acc4906c1510a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-norma-firebase-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72676a7686dda8a8fc66f23a42402327e7f5a6a5f2998dfb783e0543c319224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...