MAL-2025-140434 Malicious code in carpo-bunyan-server-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6973f52a63181e3e68ed68ba75c24c59287e638797dd3fe7f6afe8254cc2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142390 Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148138 Malicious code in spectron-webdriver-restart-cluster-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c417cff21456035f8c3ced2baa3c4dadbdc2048dfdb5510a34bfe0d3ee045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-centaurus-lyra-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36281ac0295c72c85b8d98b8680f953439a838d902bb40f7cf5ccb05193f6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-morgan-polaris-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca8a23e8d2cec9a4cf37fc974af0d4e84bfc6df5c1adc870b4fda3cc145cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-heka-chakra-ui-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae1184dd4f60e3b2275845574ebb643cb6f3a70b0d5d35c2daf60368109d82a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bd218322e86db28fceb788d64cf846a6cef2d7f0faec2e9ffed93d116f446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-apex-repository-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec2ba01c12acb6ffc65197209a2b8e08fac7620715ef2f20ae130393a7ba497e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-betelgeuse-lynx-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109285f2f1e983b64fac27c958699ebc79fc2ad92a4eb353e7f25c5110e0df5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-materialize-markdown-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a2083b4fb84ffe9e31011134778fcef6d65245910619783432fcfd3f6217af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-publish-dynamo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2239021d8ba3e0fd35cef18f03eb658475db7e972d2afced467e377c9c17d430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-dorado-repository-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5071ca3fb637462bf5d5d6c61c99819ba1b4ff03808f85681e4bd3aa023965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-figures-thuban-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12075f7bec8a300c36a6f8ba11af5667e3b90a67216ad4cef0c3f1c7b3401789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-magellan-izar-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37932fd636f353019a58a2c6e296f2f2032b7ce7a5382beb3b4f835090c776f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-pegasus-lyra-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35707c164ff23efbd67fffdf2b796d89838d08e530f02d8a1a53add5a853e96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...