MAL-2025-140103 Malicious code in bootstrap-fornax-miranda-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b002a965cbaac43533196a62f03eb1874cd008b25ff59bba86a86282f9f535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-miranda-oberon-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e045e078de01e3ce8c9a68defd2bebe8212d9bf603e6dc9faa91cdda033f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-run-script-weywot-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b1e32708e609247ff12298f129e107d30ebeafe72b630f4eb6775ce62f1a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-enceladus-telesto-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b84a7209ca76d3f75e1441dfa06b102101ecf201a5d0202b27c3ce4d1f243a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141208 Malicious code in cosmos-jsonp-sequelize-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00a5abfabe04224fb65871927d49042ca24e04932ace2d1531b09a6386ee04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-browserify-commitlint-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1d432cbc38cd2edea7a8feca2f8f380d754cd24a8973d59c7454e1e9453380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-await-dotenv-safe-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3dd051d31444bc7127eb48726ab34015ee5222ef812d6fb32a4a2db9b4aa15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-charon-ariel-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1a5ae50051ae441d11737e60536d7cc4a8b92095a594b5f7e1591a7462d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-neptune-sails-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a139c4e9108362a1529b5c9b7d2e6f453474a8e463160919d7e9de66c207f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-sails-standard-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0ee61cb1159197dda8361a49b1dd6dece148884308730df0c269184894e98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-npm-kaus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b8caf1c1af4b970fe30f56c9e9ebc3ad4a856d8311c24ea3cf0b79665e685c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145644 Malicious code in norma-iota-superagent-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317515e396939c7b4116b7f35bbb26a114b0293b399cec840e983081cd5c2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-less-loader-mysql-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b0ecbb57fc6d6f24d993aca7226c40313a8afa4b924e0eff9c1058e3b64581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142989 Malicious code in got-superagent-winston-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af67224d6ced20e78cf16853a62e8f18f7cb7583df01f4ed51adcce2de1bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142717 Malicious code in frontend-rigel-wezen-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33794057c9b67622435866807b42bb0f7b61129614c9ca0cd1a14bf2ff9caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-convict-indus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7242dca6f6b47df2e61e95dbc7b3ae53b2eb59021756a5a4ff56352a8137a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-shelljs-xerxes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8de715e5b1534b7322f06bf1f7d591feb8f069c023490ff6e1d16a652a70c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143578 Malicious code in indus-standard-semantic-release-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0857932897470d06bcae252529029eb6859e79da626add35f7ce5eb8a6e154da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...