MAL-2025-142147 Malicious code in eridanus-install-supervisor-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1376bd5cb9c0baf92baabed9c0684dc0c88040e298eda6fe848c4b721834c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3224b81b0368b1a9c8062355759b2499f2e030d243d5f932f91eced78b7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-loopback-tailwindcss-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed40b84ddbb296e2da31d1c24d9acb00f278cc44f7ec2cbe040a1547517e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-apollo-spectron-webdriver-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d734ee8393ddd4f3ccab4d05b46d4a8085efb891d8ee9e67bc44443567abaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-tethys-adonis-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf8ec74ac6f5b6b4d21274069aa4a0dcfaf359e6346e327aadba4666b895f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144513 Malicious code in loglevel-lynx-rate-limiter-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d7323270e59e13296ff1331364ed8cf765141361a3ac7614709d7f67298830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147374 Malicious code in restart-changelog-heka-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4e9d744ae94327c698804fe82966dbc2351c5296bc154d46f1937541b8f1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cfc4ec996afc99ef0c7286e1d678dabc38dbb28ae29ca34a2a35855556cca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146563 Malicious code in process-parcel-pino-pretty-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cf08b13c917d95d27c5154685b6e58aabcb6d162a18cb5fd511fb4223aa7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144495 Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138900 Malicious code in northern-copper-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c94d415e9762107a032bd4286a05d7948b45bbb787b79fcc62e39acd4a3ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial-black-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d484b1b3955d344c8437e7d180ac8f1e87c3e20ac5b3b5a2bc7d046da3ded104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful-emerald-snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcd7ebdf01c168f7afc3ec5d5a1ba2a30e2d31f5b04aa30336521f00010f12eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138645 Malicious code in damaged-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1eedb420cc37719c39433766087d1e29a23f2c97a0ddff500ad02bb3881002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2634d2fcaa9ee080d19a4a0727ad8cba35d114d5c1cd9fd637073cdfaabae91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mieayam23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3761d6524fdc9f3ca2f0f9fa30be4cbd44e35fe30b695eeda99b2f94444260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0985b5b0847a8669097a6683c43169cf9ce8156891a208dbb5b89692e55a710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131997 Malicious code in agus-toge69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333a2d646b5f8348b6eb3bdbd08d7378e76ece5a0c1fbe7d76451bc8aca44382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...