MAL-2025-141590 Malicious code in dependencies-xerxes-gulp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca524df6fe30d9a679a3caf1797ead4065707ec93bdd4b4321abec7aa38cffdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144652 Malicious code in magellan-module-apex-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e15094c400bb1335ee8b3f89fdebe6f60119b6f341686a2399533da98c0340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146510 Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-castor-stream-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3868868461930489c674de57569f0da76864293b834ad3f267fc02caa7689083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144437 Malicious code in lint-fomalhaut-commitizen-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518a1bd0c06c518cbadc3f73f47622697bdae7c959d3981ee9f49276a7973fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146641 Malicious code in promise-graphql-start-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2289446017d83cf85ed806fb6e736a6f69f9e8d4e760a2daf3d238881af564bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-chai-public-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244f19577d367fc4d0fc720af976a8d7063e66a4eb3209ecf31de69fbf10a580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-acamar-babel-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975bae18c661d9351a0e2be74691280b2dad94cb2b2d07b16b53da063e929ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144158 Malicious code in kaus-vega-oauth-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117347

Malicious code in glorious-pink-hyena npm...

MAL-2025-139071 Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138936 Malicious code in poor-sapphire-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee162fd526da4df56d69f605301ea0857b0794c46bb6f558559941d8ed7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bed7823fb9b517b425027a57e2f0dcca1a7617958838024f88819fcbe6e50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-rujaksoto64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca3acdd549265aca0d4f926930673667d6e490a736c5d58f6ea289e1db662b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakwan36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7022a5fdda0297d84f61f9c4cd953a632bb98d301240db9a89806acafd30ba44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lontong89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75615caf2f39bd0b20177bae0c8f173f9c107db2b50d97264ad425db255b7a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kue79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83450e8173d44d6ad16b8397a67843e5be8f72ffecff42c358ae14f7bba8720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-brengkes51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5f0759d641db406890bf6dfdc2f44e211fb7696d8d842463879efd22f9c516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jus36-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790c1adefddc79ea4b192a9e4ee91f0b98c04f4339439015bd8337e0b24014b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...