MAL-2025-142640 Malicious code in fornax-mysql-bellatrix-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-miranda-virgo-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8823687b1a4ad4db6d07e11c07334da46f31bbe82d7d061ccf946caafb16fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-triton-figures-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e40687e2b1c78c0049facd34b47a11d95a0ff976f87f975c19d508f58cb799a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144800 Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-phoebe-octans-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f9f502b1d59b7d8c24fb7e93794207cda5d02230b9215234bcf41b07283d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142218 Malicious code in eslint-fomalhaut-lint-staged-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb105ce95665918097d4d61401177afe8ca59a34d9f9753e8c40e94ae07b8d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-lyra-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f0653ba576b64db957b8616b378786fdbf0a14b176d898cbbe3bc05bb2e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148039 Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-jwt-spawn-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9482fd8c422e0686a472436bd8fe8e417f9f1d3974b41d159021dfc6f1a2546a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a40f34ac270e32d345abe4cf6f6faeffad82b24fe6c6f9731a29532fcad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound-lime-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0d28d281a9dc4692e1bdb96d4103417a6ceb67e8993b2e375b2971cd44cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific-harlequin-guan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a8c570f0355b8e840e96d244c36e23baa6e548a9df27cb96b73cc2756c8d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-beige-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4badc0df98773cee9b3f296eb35c957010413dcba9bf6de5feb51ea0f86fb384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-tomato-urial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4ee12bc8df657031eda91ae45e9079c6d6bf6ddfffe84d7fedf523215f6281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138726 Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138672 Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138771 Malicious code in helpful-indigo-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073b7059a8d0026ccd0785079c933b238dfee08450669c873740d576b04c2a34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...