MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-lyra-husky-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c1b313930346692cffce6f1bc61b009d5c7fc2c4c6e9261b64481607b9a669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-quark-dione-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c70caf0a065f874b094b56baaf0fe4c06c6faf90160ec6d14f3e09e716d4c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-gulp-standard-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ee9b278d75ff46b2a58a07825017782f52f5671707881176249b21328c2f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-csv-bellatrix-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3973375d954986667ca7aa33aa2b77e079ce52e861180f1ea202f3071fdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-supervisor-meissa-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149138 Malicious code in version-janus-hyperion-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427704e8c1914d68ba387b56c941a250f60c48b69b5a5441fb65e0f26bbee07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-nconf-halley-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99eeea22776023a893b8e4b2d65a89134787e4071cffb487c1afea58bac1525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-markdown-pdf-rollup-plugin-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77dfa1669c148ddf60045b113290cbf3a12671d386005e3a6accb1714ffce1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-chromedriver-query-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d823f1f1e63d055ff00a2f0178f8285f6d4c179044f1e950e9003575ff523cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-backend-aether-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d525e84641752d6db1463cd3bbe9d86535bf7ea9e8e5c4ce207ee87999c80e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-mira-sequelize-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8fdb4bf11f99e7be621461ac8b968a5c58220d23b06cc0b8cb5fc43f71f98cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-helmet-winston-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60ba3ce63f13f245a2f98182bd6b08c2bc1433439c29a3edc7bfee90d8dcdc72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rigel-framework-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141485 Malicious code in dagda-scripts-callisto-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65067c64696414d0b4da2d866416a0e37392a25616c759a9d4a8d485e05a5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d986962622d6e31c6fc296c05851bff7c88a99756365beddbc2485d7ce2d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...