MAL-2025-142154 Malicious code in eridanus-registry-nightmare-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598b5c68b81db1caac8bc9f7943296272cf21fefb75a73711750c94cb94c330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-enceladus-reveal-md-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d8a3120c190a34c49156fd1e686e81f0eb1c3ae6171c5f6d558e8b32034c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147737 Malicious code in scripts-miranda-nconf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdaeed21936afa676f6e018d202a8cd6da145ff70e6679d211180c50c08c4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141143 Malicious code in cors-webdriver-mocha-perseus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c2031d8b126402d9b46d15dfa6a520529fcbcd76671a34f88fae11d8c008d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-proxima-relay-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97d2548e73f82f87cac820df108c3868387f8df985c364aa2b2070b13435a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-xanthus-slides-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564241ace50ae8cfeaf5ab8b4c943999f20cb66edf29bb7a2025370de13b0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-sails-orbit-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec13aca688ab1c0cd0d3904d54b99efe70975f07a3ed1a3628f53017e57239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-kaus-server-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7bb0fb0cdd24f0b62b321af0a5366d6e6918552563a5647bf9fa2c345e93bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-fornax-zenith-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71994bc89a1b2a38c4492dd3f10872d315ccb28b022824b4125a3687ba0b7ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-leda-cz-conventional-changelog-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 876bcf67f0e5f36d7eee5b6c9cee94fe7944d3a8c0dcb28b58c2ffdb424b52f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-development-cassini-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980e9d652b81daeb875482c3bb1b2e296302bf80c17586a0b77dd834e11825d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-comet-module-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-lynx-ursa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6b9e2958f19ca89796a67d8034d818d1ed8d5a1a1807f5eaa07c7468a92e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-socketio-fornax-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e4cfe4008f63bb69f79d8d2d28349e6ac22e9722c9a52f41d03bddbcb3ffb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-eclipse-electron-builder-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa80096854db1379fab200b9c24918a2669cb0b9a6bb1d1972b161de787bd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-command-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f12398e16b7a7d7fe6846b979eedd67f002e985d6831deffbd3e08f3b1f94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-prettier-stylelint-impulse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad1196d1bea592e2c0a9af35cec261779a44ca6248ecb86efe0670193f7323b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-levels-supervisor-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868c0994e06637ba64441e54a1fc3ecde4cc85b778c560660eb4a41245168495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...