MAL-2025-147573 Malicious code in sadr-private-cache-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725582fbd138d40610a8d39222319553a140c5435ccd2e0700e92ed0ba29ef7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146723 Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145568 Malicious code in nodejs-io-jwt-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78bd8f68e5084582ae008ffbde3628c1d8c5c11ab6dadaa29d7b0c2179fa3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145955 Malicious code in parcel-colors-package-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8816a40a04fc78507feb370adc487c77333d15f2c73a6b91116e678b3fd138d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147445 Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144309 Malicious code in less-cross-env-enif-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51f4bd1b642b2fde0f784e6728bc41be9488dea6352aa752a2e1ccd2f2f7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141006 Malicious code in concurrently-fusion-init-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 447a0dd14642fe214f74258e5f7c9daba2a84c171060af3d133f58a623b6e20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e86a7248a8eb2b1c9dcf387615c6691ab9242e4d8847479817c6adc571471ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-polaris-taurus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31e5bb51547755605f7289bd853045bb98d461de3e59d101c023a972067444b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-betelgeuse-element-ui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68efeb737b282e971935a9cda9fa864a335f36aa3703e33e981d09cd415fd060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-markdown-titan-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35619b085a70cdc1371d350992894e62fa81e502bb384ba06be4c705b98c6742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-betelgeuse-exec-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2154045e7fb54a083b9029a1dbd9999c466e2d28e5a016fdea509f93c03163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-semantic-release-elektra-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-test-elektra-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58cd74dad8498f35be2b42b9cd2779b127b6ad45ea4954bbc77ce2fc2719d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fetch-gulp-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c4da9cb7d36cded05d8c1bade5ffe9c7b233c9b1c4b31e046664104ba0b11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...