MAL-2025-140997 Malicious code in commitlint-xerxes-deimos-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58244559fbbee2ea59e05e1acb575ed0ce8db9e247dd3b432925e94666a5907c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144222 Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142805 Malicious code in ganymede-io-canopus-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f96f8497b5084e3ebe52ebc88c51353e9d17e69efa58a47766155ec4ba9b577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147458 Malicious code in rimraf-procyon-eclipse-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7405c03317d1a758117a3161449004a1e8a20b070666ad8dd0696ab586dca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145728 Malicious code in oauth-eclipse-rest-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a9d7ca9340d6fb8b3f88a34d84bbbbcee43c40fe37d53bf84d90cd34b2a31a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140220 Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-hugo-promise-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a25079b613d6030c816cc270a257bdc5bb2c7b5b0b294acc68937fb741bd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-lynx-upgrade-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82af15cc688492a87f753018c2a22b0de6ab6047cda2e5cd8a4d9ea67d74dfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-release-it-iota-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ef678b480ea8357c3403bc92974a35f3d3162eb978c30eada96539552e2922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-mocha-postgres-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-cache-socketio-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c505c1c3681aabfe81be57a2886297ccbb2901fd0260f10d2ec586bc0c95f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-elara-kinetic-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00251c250b3e76556a1a9832ca26172cfce2fd6b2a02f3b8d0b9c8b6994a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-pulsar-google-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6c861bd6e9c076a17982609b8089b529c3b1811d9a9c3830b0c0b2bd92d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...