MAL-2025-140817 Malicious code in cli-xerxes-less-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f77ad82d11d28fe06dda99aa8669bf376292cbe56864e2823c56240c757942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-janus-auth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af4e08ee61507d2dfea640b983f7ea3e33015cfc6e4b78590648dd42816e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-chalk-rate-limiter-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27945306c863c8a6c27ff91abae72c44edef7189fffac57067a019109c805089 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145141 Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-ultra-phoenix-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23544b478756bcc91654d2d0acd95386311f1aee22d1468ec6edb87ab4e4412b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145251 Malicious code in mysql-kinetic-xenos-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054698a44ce91b0b7fe53abd054c720e6d4f9043f3a13653cf4a9c0f1afe346a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-zephyr-repository-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98e541e015a38ec9832fabaa861f89448f7b5bb4e07b64cfc9906aee09eacc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-configstore-ultra-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df3f101f40a801f8e4c2f3629648799481e226d2d379a8ff859c31cc54d24cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148232 Malicious code in sqlite-non-blocking-native-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bb8d693502367467a865250306d6251623b4fa2b1c23100452f92000dc12d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142440 Malicious code in fetch-deimos-acamar-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b897e3a9820ef17d02f095ee4115b692e66dbcb446858ff17bb002112e015788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146562 Malicious code in process-ophiuchus-ganymede-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2e219ff512fe6d2bdd06bda51866c8cdfbe360a46ad33c137edcb05f896e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147268 Malicious code in repository-json-pino-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978d0a10060a9f7559ff23ce30037fc4054b3b97f8c91146b25d2059d4a471eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-private-quantum-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7752eea6c390ecdad596c26d970535b56ffc581203dd983c86e96c291b7694c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147946 Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142096 Malicious code in epimetheus-kinetic-spectron-webdriver-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316ff0c6870cb7e06f0176f2e7de20fd675e906d81911ec6c1e19199f55025ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-kaus-axios-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9e940d8b489a1c7d65f3dada82da97fdae00577eda2b6069959b4bd015d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141552 Malicious code in deneb-oauth-changelog-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5c02fed0ca0d742c365b1cfaadbba82eea79ac78e874e946f8a81179862300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...