MAL-2025-144652 Malicious code in magellan-module-apex-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e15094c400bb1335ee8b3f89fdebe6f60119b6f341686a2399533da98c0340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146510 Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144158 Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142975 Malicious code in got-aurora-altair-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-electron-mutation-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452f0da71958284458308f2766fb474ed2aa1c1d6740f3b92cbec0f8751cade0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147324 Malicious code in resolvers-forever-grunt-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09265b46fdf433576f41f7f12ba7ef773b4b643027adaa79185d07f1850e0e69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117347

Malicious code in glorious-pink-hyena npm...

MAL-2025-139071 Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138936 Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bed7823fb9b517b425027a57e2f0dcca1a7617958838024f88819fcbe6e50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rujaksoto64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca3acdd549265aca0d4f926930673667d6e490a736c5d58f6ea289e1db662b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jus36-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790c1adefddc79ea4b192a9e4ee91f0b98c04f4339439015bd8337e0b24014b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasisayur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f0afba7875fd9189e704bd3aaa34bd90e37acb508d8dcfa5980be36749d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75615caf2f39bd0b20177bae0c8f173f9c107db2b50d97264ad425db255b7a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kue79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83450e8173d44d6ad16b8397a67843e5be8f72ffecff42c358ae14f7bba8720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...