MAL-2025-143941 Malicious code in jovian-astro-aldebaran-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5201ed0abc1b5182a4dca92bec66f1c018b52ab1fbe891fa71c3a9c4f9ae8551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147825 Malicious code in semantic-release-fornax-xerxes-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccde657a05676a3e3b9f919622689ae943a012f86450f132569c5866c8e60b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145062 Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-neptune-arcturus-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446e51fa447d1487822c19c02f2760b8f64761c7809b2671ffe92a6b1047b144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147744 Malicious code in scripts-quantum-andromeda-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dd57197959c002bb3f2c34384d0d603abb5da34acfe5db2fadf10e630b6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141119 Malicious code in cors-comet-ceres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396b5b1e8a9baee64e013f5565e71c80bf877fde47a43126a9ea1ccca9b051e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-procyon-phoebe-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd52e9d904db9ba9c30ff053e65e5fb4c74083f3e9eb261fe3ef503c47b00105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-meissa-commitizen-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e26e15537f1f0a2acb7d8e087140912aaeaa25fce5623fe76057bc299a546e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-ganymede-test-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce127dbafb7b36a903aab9a8dc35f72cf667d8a39356eb117ad682d276e7a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-miranda-carina-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fb65ee6b290dfabb20f89f3792d112be79a24a474b795934b0a4e2874830057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144399 Malicious code in link-babel-rehype-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149151 Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144882 Malicious code in metalsmith-materialize-gacrux-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04dacc6ff30833881570a7da8a7ba446d6cbc825fab5976981a25c337a0ddfb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139532 Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139658 Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Pack-A-Mal: A Malware Analysis Framework for Open-Source Packages

The increasingly sophisticated environment in which attackers operate makes software security an even greater challenge in open-source projects, where malicious packages are prevalent. Static analysis tools, such as Malcontent, are highly useful but are often incapable of dealing with obfuscated...

Malicious code in dewanto-gorengan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0484a96614d4028e0bf64faf3b2eab16c7b040c1bd4075de3ebea482aa25dabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135849 Malicious code in numerous_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef05084393186454e083d86f54ddaade653c6f7064eb01b5e0f34307b41e3f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132972 Malicious code in eka-kemplang86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b116b14193d099e8299feb6d526384764d171f77d2ff6c99ccc293c764e382b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138511 Malicious code in zealous_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd974497ed94b7abf9221332ab3b4cb9a0e548fb36afcea0a602996e6fdc879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...