MAL-2025-149901 Malicious code in zonal-sapphire-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8010f76cfda2befd751a5c896c91149a0f373b7790b0e04c5af24947d4a6380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145300 Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-eslint-bunyan-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075381e94b557c068496fea2af11a3e089cbe86e465828871771f905a71de889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-exec-uninstall-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f584ecc682ea10cbf9660202820033a0cc131524baae86da7bfea15e33d047fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-adonis-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007b2f11f8fdda0da7633f2f576840f23f5d98ec7af1de960701ee7d69088ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-ophiuchus-markdownlint-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ac8cc683427a074124be21bbbbc3bf4c8fd07002d601cea16482cd45c5c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-request-axios-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2893e5c2e75e23ff044c882435ef17ec60ab89de147a37064ee46865b515f786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-meissa-react-bootstrap-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96f088ba2cdb110f3cee7dd73edd1bc2a86c44569c753d51f346548c5d92ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-altair-readable-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0640e5d7dbd534dd75362e631e2035cba7e43d9d2a66b753602e728af6ba27dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-karma-airbnb-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24053c312e087113d9cf6bb899794dc96510455bee527c75abef0bd3abfba6bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-thuban-galaxy-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3662286e5cc98f31fa21e440791aa479d49ef39b59c4043f6bc39600a6eb144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-bunyan-warp-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758f8e3c3b06dd11f060896d9934e304f95b6d59d51eb8e698da76bbb918705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-inquirer-farout-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-proxima-dactyl-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f7ed81bbd1662bed8ceb0c5727d1de6c9aa86588f221bf5fabfd7affc36f19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-ignite-hermes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726b2645751743cf3aae79ce0cc9b10a4997d86f928762af4164921ef402202d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-europa-elara-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e18702b422c428f6857ffa13ece7e9599b9f0a24287dd9bab92211383f85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-terser-capella-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1313e3e3f93703b6b22a59de9916d11ccb6378d4b340b02f531a428f1b8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...