MAL-2025-149403 Malicious code in webpack-postgres-draco-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765202ad2c860e75154b78975f19a9173bd6a6acf4f554a2f5f02825a71f85d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148625 Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143514 Malicious code in ignite-halley-jovian-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 641352305dc2f90655fc051c707ae15f10e5b860427930d87e2b807717cc2ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-grus-iota-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db435aa072da87e3cd2d851ea479363d8f2614b417ea1a476c6693b7e935fa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143046 Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141625 Malicious code in development-mui-avior-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847441eefbf7f87609313b98589bff9e11ed701a7d8cef315a07e5b6dc2f7cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141705 Malicious code in dotenv-csv-jekyll-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f602ea5a4d3e70788dc52fbd3fcfd4afcd27d68f5d379ce7818d10fa011db3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144656 Malicious code in magellan-playwright-sirius-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45bedbf93ddf35569e377ee843b9f2657b598f470050b225b0d8b52c953834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144881 Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145367 Malicious code in neptune-mongoose-kastra-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43400e1607f9419af64ffd8712bb415e4aa32335781b992078ce9a22e64c58a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146690 Malicious code in protractor-miranda-mensa-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a8cf61132b136b96bfab4a1fa37e312363717bedabfccced7db087db1b0eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149040 Malicious code in ursa-apollo-mutation-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d42fff9341dcdab6e4009ac832a38be16bf5efd69f65c97d53955e9bbcd5ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...