MAL-2025-143637 Malicious code in init-yildun-proxima-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8e58e2ececc108f9c03ee9a1ddd205280467095f54af32d75cb204011dcb430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141482 Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144020 Malicious code in juno-callback-pegasus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38149d9fe8687c7e2c46ea0ee733ed9a8894eb2c8cff4bdec6a64bd7493c91bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139271 Malicious code in aldebaran-charon-pegasus-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b7e01fc3390efda5a9efa37e7d1917a9fbe55cd61b8a33611ec40ce69b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-canopus-markdown-pdf-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38843c29d07813f9a3cf2ca91391300a174e390362663776247729b76a079c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144194 Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139784 Malicious code in avior-sedna-adonis-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f6a18b05bbbfb0b1dc6c244b97d5ce8fb073ecd38758720a74adb3d57de635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-meteor-cross-env-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b02a5fd83cd585c97bfba295b68bef6049616cc907ce52122d685ac0a93aa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-stream-achernar-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f0aa00a06877ee792afc87c3c806b77a813807ca4ca6abb7f87513a020c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-spawn-selenium-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cb089b30b1c6d96a96f6998ea292fb2c8c40209e0bddc9b96acd3b630d989b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-phoebe-lint-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ef74439ce29c045f4eb2dd0c8fc978b55be3968ca376b545dd76a88d5c5872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f372a656fe0832a9443ce6a331a1826c8e5a2415fb49cf2868ea557c790b248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-orbit-csrf-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947709eb4c67dddd2c3beb0b9c8b47c7a310dfddfda1f9499574825d9538b59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3aa9ac1422845c7110ab66791986ea43e2a7c9c6291c4a34b6c8715f22663a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-sequelize-callisto-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdaf7d09db460ea49ef4af746993205b3c7f4df469d8757fa497731a2ed8676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-cypress-nova-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314605ac8a292040082df3767736ead396067f88d0193a18f4a19f922f5119f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-google-europa-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2181e75453f18c1cced517ac0a40ca9a47f071d4aac88b49217332e3088e5cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...