MAL-2025-145438 Malicious code in nightmare-indus-nodejs-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fd1cc37d46f1a1f057268f80ac023e3523d32064151e456dbf016869d8c97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146800 Malicious code in publish-phenomic-phenomic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a89ad163831682a4f9c393633188ef89b0371d75e58767e815d7e03d8bec4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146777 Malicious code in publish-carina-centauri-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c07122800749f613dd46f580699227bc1e00d0069027dc2215f340c2bb00f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149694 Malicious code in xenos-weywot-yonder-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459589f2935fbcead2d7f29e5333332fd8f5e7a26cb0459b689682edf05048f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142554 Malicious code in fomalhaut-standard-slidev-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5371bd44f2b30d32f5d87edb2f2d34d2dc0afc29af9daf7af1207e7b2b01439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143130 Malicious code in halley-auth-vega-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e198bf855eb0b039d2d08b024a85c30d227cbd2fc6698801a6f92c2a987080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-webdriver-manager-pm2-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f846e3d65d5e5703d9a9fb9b98b8be41399db85e6feb68da6523eaea3c0cccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-leda-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ebc3dafe421376c8a68b4f99a070c82d6b07785161a4d708ff483c04935e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-yildun-iota-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b73ce43507c72532e06d369ad78ad66dcec3bac05ca084311645fb9741df428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-helios-pino-pretty-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d29159e5f9101d2b2a1a011bb106477bee002fd2bb59461e1830192383036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-dotenv-safe-prompts-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00977fe89791751a5929d9c14386109d623c440e9303ce064db9d658963cf4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-publish-algol-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7566a3cbb5bac2b16d724843e2eff719ebf48475bef2fd16561b7d5bb7ca51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-chromedriver-fusion-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea532cf50fb845dc6bfc7bd4d8d1fb78a1e79e90fb526d9c58d9205399e22df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-build-readable-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f03e847818678280e92c3c6e82daa26f0b7e22d0fe3afb9b4d2a96f20cb04908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-pavo-electron-builder-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1894ca2a1a514aac9ef1d57aed50f718cae881ce54de97f55d9eb99529b4d86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-hydra-algol-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c996b6ede00885261ac17e95a57478bc731d36b5ac17d25dfb729c5d90785b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...