MAL-2025-149522 Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143250 Malicious code in helmet-deimos-enceladus-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6e531a39369437b0527d81e78bfd05af9e42257dbe3cfc838ba5a7f11ebb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141782 Malicious code in dotenv-safe-wezen-loop-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfbd1335926adf07b4842df69761df017e389eb233b6ad9b629bb51f25ea4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148282 Malicious code in start-stop-terser-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51be2fc585f72ac5e1c652ece518c196302ce3e5048abec0a7233a0cdc0b4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-firebase-iota-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94332727a2aa8c02e041f58ca774af62ff4e6988d385e78bdc86956bf5f7f31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-delphinus-umbriel-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc77480c85e2dc600bb9dd6a059ad4740573e114bceada95a408d31a4d3eea09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-electron-perseus-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b734dc842f23482e428352f82b5484e7d8a438f991e4dfad21d847ca8ed5262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public-antares-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442f698cd7eebc7094f442dbfa1c98b3bec319e5d6970fcc71409972471deacb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c748f511d4cd75bfcc08bada27b0c236b32a30a0db4a112c1e7c76ce1d6510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-dotenv-safe-sagitta-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2a9426c6344cc12dc0c13201ef225ffc7651bcf98aca5a8f8fc981a1464400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-uglify-js-uninstall-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9e617966f95f14dfc7533b56c77f9f8aead0d58a5ada8990958634402c7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-elara-relay-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55997285779079206d39209f938d28c698c67eebc5704e9a8b02cafa6a34d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-fornax-betelgeuse-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3404c1a6247e9db097e33c1be9d5720d9c12618365536e813f891f26d2a35942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...