MAL-2025-147206 Malicious code in relay-nodejs-gulp-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9ce85998f19be660fd01a665097cfc83355d9d6c8b14b3f39487793e5dfb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149526 Malicious code in winston-server-cassini-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a935b48f23055193d417855846e711c8fde219f4087d81c066ddacdb7f0d3e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141927 Malicious code in electron-polaris-sirius-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c3402bb80a941244f2dabc00fe7d929c018deb2a7e6b31c51b882cc3d5656d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139481 Malicious code in apex-magellan-winston-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52039775c5083912cc2f65d59589cc60afe8445d9510280b6907bc13154e2861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-slides-ursa-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165eb7dbf8e78106fd4075be2174b6f4e8ebe6cdaf5156a1fb27724449e856c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-redis-levels-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4808d63fabbd9b447cdda5786ef87da4c11c3ccfba1d820b6fa9165fdd0c9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-andromeda-unuk-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48dc943ed0ce1b9e19332cb3d90fb3137fe2809f4fb3d3444a4714c8bebf4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-commitizen-vega-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6681488f2f6863e00ad9ecfaeb147850e462a4e95077c0e213b618430038ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-kastra-spectron-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c735956c75064f9891f712046ee262e3c75e0ae2c4038ec4b4b938928e2991aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-wasat-ceres-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78977fc84c2e7c36ed3f9a84b4d2226faeeb53aeda92309a9ebf36bcdb7a06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-kaus-despina-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-meteor-pipe-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17253d0738b27dbf70dd54f4a14d25e78c49e7c9045b8cd3a1eaab054173f5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-rollup-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481b7faa3c35341d66a7cb67ad739c59a56229bc971c291345496b56f4668ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-wasat-miranda-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d06b6051c120ca10f5da401219d022703a9a252a321396da1352869368eacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-promise-rigel-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9c0d0c1484d3987510685503adf6ec928ec165b2a22fa28c792c09a33310ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-apollo-meteor-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954e6dd2917703b268c5246a18f67420778d3f628eaef1247fc2e40d7c5ebf0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...