MAL-2025-147020 Malicious code in radiant-proxima-dotenv-safe-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cac62cb9136b42af9e93753b4d8863a059f0e4b7df80eb6aec0f46a5de515d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141418 Malicious code in cz-conventional-changelog-eslint-config-server-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e3969b8ec88d2889697f34d76d21306f4eccf27e7802b4fe056dc0fd3bac7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141599 Malicious code in despina-json-standard-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f8bd6b352029ad45252a1342f1a9e98156faac7a089148feeee497d82180982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140540 Malicious code in centaurus-arcturus-prettier-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cd34978d0466f39ad12f91aa649f65f0e96d02b2fd1d6860accb169bc82db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-test-dactyl-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac07eed232bd602bb75c1b252ee185d4d14cbfb07298839ba8056d35a032c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bd218322e86db28fceb788d64cf846a6cef2d7f0faec2e9ffed93d116f446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sedna-css-loader-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ebf2af811d1202c068480a5d5d14bfd24d336da782807d0ce9b3dabb926499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-nconf-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-nashira-husky-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8239a6961f37959561c688b0fb1c1dbb97528ebe003447f8f0e644095e4de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-css-loader-draco-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0ab1c14dfa80189445ccdea78b141d5d38eeef4d772c4e65ddad170d2022ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-kronos-elektra-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34120f381757b55e7a773b70ae46151f71974274ab08bcc6382fb88fc45bb9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-equinox-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ee17a1a11f62310bd6043d3296351b281b50f31c46091754519d19a34fa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-non-blocking-mongoose-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea88450080d7164cdf4c38d5dac58f5320ab57cdd25d5d0307da65f884d7ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-dotenv-parse-variables-wezen-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9fd5bae6492801246b032822f7b75cfe47a3a5483a7f98fc995f172a9eb619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-dione-hyperion-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650be6585d50ddca2685469d48a1b170c812e5febbd8efaf74b86549b042f005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-xanadu-bootes-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a8e9f820d9fdcc7495d8be7342f3bc3b30c703f968aba70bde677cd39a879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...