MAL-2025-186876 Malicious code in event-husky-tachyon-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d6d40bbd46796ffe0433b9e3e0fd88b76fb46ceb7a4973ff526bea29bf1b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185749 Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190141 Malicious code in version-aquarius-run-script-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a84d38a922a954fbee7f9e56c1959385eeb12bfe9493e598a5dce063b254ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in array-async-export-lambda-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c2bf7c9af1def9500860d07c8a0a69f31f3575833535c28b6b1d0715a5dd9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gammarayburst-technocracy-janus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8fa380896847a4f64365da44abb4d4cb3d6cf76d566109c27ae8b4c3eefff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-eris-lyra-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f15351ff000357cf55920a6174c8fb220b1b8986f075040a4534a6af1db182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a279895093e63b7653ef1defaee79c1cb92b45475d3a6c650d3ca4ed7a056fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-cloud-try-assert-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd568cad8ce32be5229100a77795fc873913ab9e69eb170a41cfc941c01ef28c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-apex-loopback-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee23013fa3827d0680b480bf208efea7b8f2b19d350a6479f7efbdf498a4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-cluster-hermes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75be2e9a1f4408daffb548607099533dca2e521294c032121214e57670fec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-commitlint-config-angular-lithosphere-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ab646784f3f17c42be291e7b9c338248f54998d51dac40404b1bedf5867e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-exec-nebula-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d149233b8486494ce40ab83a3e2e4ecf442479f183b3b96baae8f80f59da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-spectron-parcel-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8ebfffe8a310711076f2d7bdc505e17c208634ea3a5ea03c8ebecf21c0544f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-yaml-fomalhaut-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4735737e1a0a6fbceb2d1dae53f6f19003fd93d086cc37241d439b0b46e27591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185626 Malicious code in async-proxy-dog-refactor-nu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78283fdf99d15a789e89ecf764e0adce1a1d5dfcc1e09a6d26d5eab8b9f4cc58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189111 Malicious code in redis-parsec-fomalhaut-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6b63091fe63c9c115a258761d34a460d26b24a7a9618ffb80e210f5fa78f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190329 Malicious code in winston-boson-publish-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5443c2030097f72cca3da1bb12aa17e11ac24d30b75d4b58b456b05ae958239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190108 Malicious code in ursa-inflation-atlas-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f08f459b286f25ce6361ca667b880bc5e7084907c298b11aead0995d00ae6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185794 Malicious code in betelgeuse-metalsmith-frontend-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790dcd2ceb700af788d0557c09c4d92c94916ec90b672e724cb3fcd64cdc8338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187098 Malicious code in gammarayburst-semantic-ui-antares-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a49ed247651ee25333f1052e7f81315a7d9fe38a88fd3654a6ecee23ac3316b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...