MAL-2025-144554 Malicious code in loopback-jest-oberon-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9588f90e10bf64967aa7f309ba0dcf4a06281c54f1ea051fd212c29556caaadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142116 Malicious code in equinox-aether-enceladus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72ac2bb7e1588639a15767799edb1be2133b975a202be1a2e499f7f41565d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8918b440c334ac959b4a14cb31973b6672f8c32b5b293ca8a93e02c1f0d77725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-loop-izar-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438fca0b19ba97c3e5e51640fa7210c3677d4e07d791cd09842ce448342e4bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-auriga-helios-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bce6aef65b047690f12ec284b604cd35af45717c4af859051fd00bb4939858a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-winston-standard-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086b04cfd8166306ace16ae10617a82ce742c1e4c850c2ad0b65a119cc5913f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-nodemon-lint-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97eed5e8ff22cc9239cffa973753ab2ed9b0ef01e31a43a734b87a8a922d04e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tailwindcss-sass-loader-markdown-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137436c696278ff6201b723969c10a93551a6b893e63a51e361fa8f7737e99c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-commitizen-transform-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7956d128813d337b1eff7b6337caa03611f4c893733335c524c0a1d4df948799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-chalk-hugo-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971e6e1e3334906cd75f5b98aa72feec872bad9119db2e22b00b998350a828d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-lynx-astro-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd46b3c1de7c1784a8817620ce930feb00336a3a0fe9bc8c24e890ad623ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-pipe-dione-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3687813c099d65f49edbd51a912b7bcfc7eae932b849d51358adfd071069d503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-loopback-element-ui-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0063ea8e4d2bc6a050c399537e5a25d2bc5e8d15ce2b5352dc33293858aa0952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144482 Malicious code in local-auriga-miranda-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf113f613d25eae6bdfefed5ddb02dd6df5cc88de9e599953906e96e2578637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147484 Malicious code in rocket-ultra-playwright-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4b6491f15f314eec05abd224b0ef96bb4fb0502115124a5cac9421c3fc8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141696 Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144954 Malicious code in middleware-elektra-webdriver-manager-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fa4a752b1115950ffa2e6d7e6822d1f9b2148ef8084e6635d365390d004fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139287 Malicious code in aldebaran-zenobia-package-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d5bb8a735237ea7373c3f507ac04632de6eb775b54c59acde7690da38a86ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...