MAL-2025-145414 Malicious code in nextjs-dynamo-gemini-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6762dff6c35a79769f64aff5cba24b6d655d7829549908382bff12256f004d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144540 Malicious code in loop-yonder-betelgeuse-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c945f5dae18315f4787680fe0df2b8745a6117d6af0a32e4b1857099ceea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139442 Malicious code in antares-supervisor-kinetic-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec376c7374c21bc6c2e7e7526708b9be627909142b8b6f8a4880b647e44265df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147042 Malicious code in rate-limiter-loop-npm-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144539 Malicious code in loop-xerxes-markdown-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caea6f928ba904840092e84e5064e8a5fbe2307bcbf6aaa7c91b07e264cbb141 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144535 Malicious code in loop-solis-charon-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0269f648fd5f31af9e6f42ee7554837900b48663d792da87cc04a3f3034c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122314

Malicious code in sagitta-perseus-figures-loop npm...

Malicious code in restart-loop-quito-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b08b626c1b721e934cc6da12eada881e281233c8d27a95f2ee119e8031a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141822 Malicious code in duplex-winston-loop-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148944 Malicious code in umbriel-mongodb-pegasus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659c7ebb25050f6cc449c809f7c3eace227431e179d516051f3a1aa1809ab659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142372 Malicious code in express-docusaurus-phoebe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b55d736c3d78cf07755776e2b8f0e5716fd4c87b87b2e6bf232c95af61c788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111320

Malicious code in meissa-bunyan-loop-ophiuchus npm...

Malicious code in dynamo-nodemon-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141587 Malicious code in dependencies-upgrade-request-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465f8a5b50c89ad9d8f18c8e6892238427b94313db41734688588131e2951400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-umbriel-jabbah-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217a3470a4faa8cd8f45cc9db7f1cb2c9a4c9c6119b0954169918df22276ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...