MAL-2025-145339 Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-loopback-jovian-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b75b0fa3e819aea9c2aeaa0965e6cf53c370bddae1dacc9fb0fec107471d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-react-bootstrap-development-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b093b4a8a3b03954d6d7276fd2edf1d96030f0ffc91240dc63f59f9213f8fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-postgres-tool-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8249a23f43ad24e6e3e5262de5dd34c85e91c3d96c59f35164cdc3b1899fb203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-fornax-loop-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c267bf36498196cf97e6013a4a157ba965ddb10bf798d0ce5fe433650a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-redis-tethys-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7014fd80044159dc8d2679298a21283dd1126796586a383228bd0cf6fb2c52b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-webdriverio-solis-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629d0df2dedd06e5769bfbd601cde8199384d4cdf2eea2e5e5bcab3efbbe6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-release-it-reveal-md-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9509e3bf3c60fc0c4f421aaa2b37563dbf7315de8d4cbea0def2c9ff216cbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139928 Malicious code in bellatrix-centaurus-toml-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebdb2e51245207a285797bc56d9291bf5876105e83d7392badb56818a5c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146821 Malicious code in publish-vuetify-deimos-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d89e84ba3999cf4d7d7762e710987dfa5c78b6051344f073b857dc382f4fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146333 Malicious code in polaris-csrf-solis-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba790998ac2224443eb8c2227985b455aa02d7be390597fec0d0f74cb3527b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144257 Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...