MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148760 Malicious code in transform-cz-conventional-changelog-electron-builder-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8a8a2acd4f5979240d2cb94b41ff2e23f5724b9ccf8109a4e25260841a8fbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148557 Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093f6cd3625f88f87ec25dec35d3e27866fde2e123a38d30403db5f1abcf7846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147438 Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141141 Malicious code in cors-venus-ganymede-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f72ad5f784dee940ad28978b1bd0d8d0fa2406b3ede5cb29dda4a9d2647f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123538

Malicious code in postcss-charon-antares-mutation npm...

MAL-2025-138757 Malicious code in gothic-plum-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a609b5dcf10477d4d9e3252e4994993f6206ef46bb9c00c30ae5de5ffc8e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-scarlet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d625dc8392046d7f079d2c9f470edf6e05d3884f821185549c04b7d8a46d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff1e6afe7b4fdc33e51c6678ad61a31ddbc1aac07ba6ca031c8e7ebef3aced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3134ceb98bf8ed05c462cb28e0fa2f9543a1bf19864bb487bcd88654e1ce624d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf4dfaf084bea5fbe6631f312cc1b90f2312c0cb72f3cdfde5b2b727a3590c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klanting6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad936250074374fa3c68f8f42f09030b28d6b6e3eccd5c732809130d9e88f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-otak-otak17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e861f3033859743a7e33bb2db0798ba79f0120f1d9ec72d8d037d1b9ba11a325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db56806f35b33019922ff57fb88d490d7a33cbeb1d0527296332bf8389c3e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-empal12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c32a697fb75d1f9b7978673e11381c61482580f994ccb3b5d7df8457497008e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lapis49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eb77c147be35be66c3e732f6dba1cd25df8e94982e638b81352196232e62e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-asinan78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf635c6d2b0574cd7cadf1d660c687a5bd7b752bd7cf376f2453b1e2bfe8ed11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-saguer64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096ffb7cce89312a1f05740a97eaa4005c14f07f3d5c212e1279531390bc11b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...