MAL-2025-144349 Malicious code in levels-bootes-charon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6250de6f7530c83732e5500e5ff0844acc606c31046c38698aa8affb35a28ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145559 Malicious code in nodejs-csrf-dotenv-safe-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26fd12eee08a4f07fcaba1a5843f9168cb580449aa6d44aad362c006e15aab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140738 Malicious code in charon-ursa-ganymede-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427212e66c2c920494458df1e674de9f5ab3f1041f068f2312a5a6c8e028e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148292 Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142319 Malicious code in event-pegasus-library-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a426ee6e9521bebc28daf065df779710592df13309fc8ad43f08f70caf3ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-rate-limiter-iota-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acfac2b63c901e11f2748993f0cd58e414c2c64166bbee7ca83b707018519d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-typeorm-playwright-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b45ccf4ee6bab76ad9bed53d6d091231fa0941b9b2c632ef2e7b1592e0fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-magellan-config-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1381d36d49061952c1f910630b1e1936b3bc590e02317d6cfb75526024ba2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-corvus-sirius-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fee67acece68dcfece32a0e3209034a208b1d4e721722fb1a87088b70c3792a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa7e2a9508eacc4043acfb139a17de0eaa316004f37d0113aea6b9de678ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-halley-hercules-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8fea094d24b08ba278de689ffd3f83c4c26bad5f1a106c99d860a488b9ae8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-passport-hyperion-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b1717d7f72fcec0841422679aabc0f3e49522afca70aa518e274c8d4479e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-update-publish-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24bb06a9bd2ef47ffef67f44536c0d250ec84117202527337d00c75f442ad4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-version-build-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba6079591827284cd67207a074de45cba5c746afc4d3cb6faac41206fdddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-koa-venus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ab8f90e8901da10b0e96c0a7884fb5d5c27e5bb8292bf8a333c83e5161a0cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-neptune-rate-limiter-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25740c87301d8949f3965642361cb4c16499d9cd27829a6d3075b22acb3e4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...