MAL-2025-145726 Malicious code in oauth-dorado-gacrux-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 717df737b264bcfe501c344b361782b8805db7032ba93e9e1a2a7bab4dafada3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-hydra-hugo-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3356433052edf0929bb0319190aaf2c242a761080e1e2ea7ffaf1cbd44dcace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-polaris-taurus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31e5bb51547755605f7289bd853045bb98d461de3e59d101c023a972067444b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-development-nebula-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44bfe6f31e8ed996f1f924f50f0c5358b6063df84a2947fef4ebcf2eb5af7e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-resolvers-wolf-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bead6dc416b174f4b3e1a8b7173da225f9499133ad4af86d6e834959ebd09d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-xml-oberon-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fba8531598d663efbbb7a6d963ddf7302c0641020585c948ea3ce54c934dcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-auth0-taurus-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-xo-zenobia-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb79cb573188c5f1c88906173ef040f515a4e0f8c4124c224f975bc85f7e44b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-enif-development-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-adonis-nestjs-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb39ffce40c8af09af9eb6ddb26d2f4ef5c413bf45dbc9bbde30b530839a19e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-markdown-elektra-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77ab9cd431ac12056e78847aaa723e5bb8e51fb990f57a377eca7958600d953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-auth0-quito-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f145c79ceec32c65c847140e686b61ce1700a24f7fee1a9f134747f3216bf8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...