MAL-2025-141396 Malicious code in cypress-cressida-altair-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7486750904608a35c875cbb4bb1350cf6822adb65f1b079b7e699c06a659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-loglevel-dependencies-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ad8a76a0c927609f542c4e8499f14c5106f04ae721ea5b396d3f82f12586e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148597 Malicious code in testcafe-impulse-auth-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64732d5d350c59fb14734adda2ccff709e55376ab5ba173f1fea28934181bf73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147788 Malicious code in sedna-promise-dotenv-parse-variables-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4106b8b561425fbf53c8ff86d6d731d1c4ce20b3a437fe2bd4f5ad0a701667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146389 Malicious code in postcss-loader-child-process-element-ui-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dc10cb21328b6fa7193c5174c025aab42f49ae52a684435b85bfcfe965e9bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149125 Malicious code in venus-thuban-dione-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 888ad67153b6a753f31c031e3c5551906677bd3c5e5b020151ebc1bb704100e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149170 Malicious code in virgo-semantic-ui-jekyll-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d4e3e628d28d18ae33ed261c564433b0747ad9352364187f69369a139f24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-loglevel-telesto-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82717f772c19f1967d06fefcd6ef777d6e576dc649381c42dc4cea9fe2dd8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-leda-farout-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b84e713521d8bb7553f1d14e06b9c4cba1e451a5100e82149ecf169a6e37a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-standard-global-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f40857900117e23b70df586911da4b9a5d7ea29996d0dc9e08ae33ccf5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-morgan-dotenv-parse-variables-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e339186a1f5589400459b801108da048290c8917ec2fb3a0835679babfec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-redis-eris-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ecda13dd725bb7f0a39453bc3e1607040cbc5abf124f49a3821af1777448e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-hapi-sequelize-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0efe0a8a15392fa00523436d0d0daba79cd82d686ca3b848145fea62b9885f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141373 Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-quito-venus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22cd3182705b88c0e14381b43792c9118b4bafb5d433ada79eafddb31bd3afa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...