MAL-2025-139239 Malicious code in aether-procyon-corvus-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8123898624474af520819d1c6b677e6d1936dc7da4b7636be947bb8d4405b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148517 Malicious code in terser-eslint-apollo-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6abd831119b104609936a6a3bb0b6b7570562aba1fdab4618704795897a51640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146737 Malicious code in proxima-scripts-wezen-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5276ed126e2063e64fb1b6332fed4302d4454bc508f04b29c7812df1983b202e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-castor-ophiuchus-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9974665bae787c95a53b225627dbad7b63f5036dde9ea0330b70f1b73b5aa9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147564 Malicious code in sadr-jest-tool-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925b1ba67d5b197bf2456562535ef44ea74362f49ab6741457c03efadb057eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-remark-rimraf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714ef1f3aadd820dc4f68eb12147374722db65daeeb986feb08523154cd2607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-testcafe-jest-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3276d8f4b2f01340c5b8606f4b0a0722893d000c715fa38528e4c621543d9f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145841 Malicious code in ophiuchus-sedna-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61001b423af9afb8ea8b076b4c05b7e15374124cf3dbb5d8a90c58906b6b60a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149427 Malicious code in websockets-solis-eslint-plugin-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127e7780d8d19e0da2569909fab63b7acd7c8241049ab9c677f1c1aa30604d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-venus-sails-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2233a552474c5eed5adf76810c6bdd4302fb6368b7098734f8aa7a3399da5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-hydra-ophiuchus-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975502bdabe66180670d191f6d6972defd72b26fe8d949223a83143d48948ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-lynx-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e0af512198e413bd0da9e0fbed417f8a39382fb085a429d28eaec3405abc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sirius-sirius-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b141ae41b6f4e29535c0acaa3fc6a2ee6123053d855ff572721b1822a26452be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-rate-limiter-semantic-release-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-cygnus-nodejs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-npm-kaus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b8caf1c1af4b970fe30f56c9e9ebc3ad4a856d8311c24ea3cf0b79665e685c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-gatsby-eslint-plugin-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b7d24cfccff24043a5bf318d127b3dba80547a3c1e34d19ee6f55251614c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-hermes-oauth-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0492b74e5b2ea4569a72ef3f1cb2e2b3abe987a865f7fb22505c6071ea3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...