Malicious code in acamar-antares-prompts-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710985a5307e4e3811843366eabbd123407628a8cca4102320e11638b7b57a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5945109b83f9ae125adf57990fa9ae515fb677c2bef5f12a56a6c7192ac91329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148374 Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149660 Malicious code in xenon-sails-standard-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0ee61cb1159197dda8361a49b1dd6dece148884308730df0c269184894e98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140905 Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139926 Malicious code in bellatrix-axios-babel-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf95012ad35bf05dc6070a021a48ea1bcca166e963aa2404e5322f93c71b73bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114980

Malicious code in cors-mdx-spica-adonis npm...

Malicious code in cressida-vuepress-nconf-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3fad2a7701e8e70e72d43cee4ad37b3a44e2bbbc521f2696eaf92805c68b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-callisto-apex-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbed3cfe68e3a74b472ac88faa9c8d2bf8dd3dd2614d6a118bed34e17c7d1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-bootes-radiant-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050a045bc10e41c3926121ea922e01fa47baa0f522d718879a886b21ba3357bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-nashira-hexo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef227d0330008bb61cb243a03f6b461d6db2c79bf02ffdaed68a211b456b78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141807 Malicious code in duplex-duplex-nightwatch-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16340ab3105a683b811a149bd270ef3c551a0f53e6c9240bdc58022ed1215aeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149280 Malicious code in wasat-bellatrix-carina-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7b4fba863e8539203503c96d45117262c003514f6fa24b312460eefc90397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-orbit-mutation-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb77b4f5020bf528599076b81da1ee661198332014ff21e93cf63b02328c53bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...