MAL-2025-145738 Malicious code in oauth-yonder-galaxy-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d70ded952f8de2ce371bb5f64f977cd19dff957f0d3a4a8ca34c1c3a1bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145581 Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144201 Malicious code in koa-postgres-blaze-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149080 Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148347 Malicious code in subscription-airbnb-europa-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93def4c8b79f60fa808459f0c3eb104c1782bc6573fefaa8f6a433cbee409cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146024 Malicious code in pegasus-dotenv-safe-build-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106c26131af84fd2a13ede22f176584dcbcea99e0b41cb22247d09674a890af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-gulp-leda-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d2c7bb8aac395496ed655e8f59fd436542ab51bc56111fda94804abeaa8ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-superagent-enif-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f582d1fcc8b43d9206c0d7ff651f4fd9297da9b6c8bfcd5c44adbf762e6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-castor-titan-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8380998eb6ab5ab3193a5728bf932f73e6aa50cafd200f74fa9f30a8daf4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-geckodriver-indus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a404f4f502807faf59f086fb270b93cb0957ba5be2459cb87729937e8168620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-chakra-ui-luna-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5906ee4986d40f97876630539dd8bd9592cc5f5d37491360a280122f0aa9f4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-bellatrix-async-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ef429d9f796ffdace8a3f703b2ae5197b3a9ee8fafd196f82b1f31c7c80adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-private-triton-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6a9a1c5dcde551eb14e7da9977fb75ff1dc416e1129cc4554098611f50076a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-sirius-jasmine-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a815edacfaadc13f51e07437f41fc2a931ca4ec7366d1b29d4e184bc67a2ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-spectron-rimraf-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73c947e71aa2563113e69cae4a5ed27b095147d625872993d40c732a020be3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-blaze-rocket-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5472177412ba005ec7b22767f42c1542b3f4d4f60fdd02d901c9d4defdd5ab8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-nova-carpo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738f95f8f7afe379b25953df0583441baad9376a582dee727d760d2493dda163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-triton-passport-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574f46ceb52ebd9ae387541a9853ce72395d9ab6442cc497745ea6bf12d08ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...