MAL-2025-146328 Malicious code in polaris-charon-delphinus-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c0f4101841eef379d3eac01b8a6dff8b51c6b61ac857ac5a3fcb6720622993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-commitizen-chromedriver-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02832b590fd2cd8660980321970eee2b88666c0c55aa94adab8c56567bd64c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-betelgeuse-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2154045e7fb54a083b9029a1dbd9999c466e2d28e5a016fdea509f93c03163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-charon-element-ui-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9faf39be3002ec216c07c9e7ca68ebb3371f6d58ef31de7ffe9ed15eb15cb823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146584 Malicious code in procyon-commitlint-resolvers-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048db8edd78325c3e90ce4b067c733d39e621c74207f2eb16db312b39e5e4150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145866 Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-webdriver-mocha-testcafe-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97be0264b0bb5094af68aea6b2b3948642428c9ca9efd84ddf15d7ab02acfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-transport-postcss-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bac55347ceb36577a07a4834c7dcd105c32d8cea87d44e81f91cec75910cdb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-superagent-less-loader-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0ce4c4cd3971ca1928b83707e7b7f8a876a743e69c4b1922ad58717b01dd11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-mui-yakutsk-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928553531d3c4b998456ef1ebd1e1ea1aff5299daaec81eb8dc255384d96a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-draco-winston-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ff5a0f28a6222a7d93aa808e220ba1825c5aa59001690edf3821026626b821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-publish-farout-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5af19c1d6f08e7ef2fd2f4ffea93902babce362354f088e98f6484d66559a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-request-farout-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be11fe39d7e45a17cb779900738bebd70482b33fa87aa5fcb66d39669a64763b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-test-transport-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdfa3a9f4d9f66229aa398e020f28ed2b8db7845692c0dd94805a1cc841b4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-ultra-grus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca227366db798cd1a92449b775f7cea1d9418456b2ff3a5363a2787a3c9a67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148810 Malicious code in triton-child-process-apollo-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7230a9819a5814ffb0edd2c058b371e41236a009c9ac7bd611208675e7ae4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144973 Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d35351e2e3b1eaf852726b159ebfe9175b18a5dc8d25b9ed730e6f7b27a8103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144500 Malicious code in local-solis-spinner-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82bf7343369abc38fbdbadc5bb280fe5fe54bceb4c8dcb596a4f850e3392814 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...