MAL-2025-160194 Malicious code in masioaluan-ofa-doibato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b82908d2aee6263bfb23ef8d19d1b9ca100bb4639b50c6f5eb6654de7779e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-supervisor-cors-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09634c7b521e145575c5a46514ec820c83b1564003fa688b91a1cbaf98120915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-inquirer-luna-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38df1c945aa945c9dd792f46532d5559c541240ced77f7885300dabc208c963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-arcturus-heka-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3189c19091c06f152dcaf7051af04de730e644743c984bf3c5753b06b2ee2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146614 Malicious code in procyon-rehype-promise-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20a079e163dc4dff6bf1a7f99b497723fecc9c4a0f47079f4042c121d0e92a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145793 Malicious code in odin-cross-env-prettier-plugin-markdown-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d798b3df9722c02b19a63a5496fb67f9983705c530880060587015ae941e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145497 Malicious code in nightwatch-webdriver-manager-process-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41bd5e517f4c9f76a221414aa3aba22babf343cdb3b36796769efbd58eb267c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149495 Malicious code in winston-got-sagitta-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82463284e6d68558aa7d4c54fff9d4a660f92325d94010f8983fa28b8bed191b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141670 Malicious code in docusaurus-lyra-ganymede-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0eea79486e0ada48de0b1c4725370f54af12d5621874cdacacc2cc14e24fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146531 Malicious code in private-eris-express-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733ecda5e2516de20ce076f444c88152fd2870e9e779df984d3a8cd9301b5fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-elara-halley-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863316f224c8dee2da79527ce27a665da7fc1ef4f1ee3791d474b5db8d1805dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-procyon-magellan-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3737458ecbcf5f4a72d484af71c52ba0eee6232f96af3f035d50de5dddbca906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47788e2971989ebfda1e3e06af9e81bcdc202bc958dd8727b5529b76fd1c5c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148285 Malicious code in stop-aldebaran-sedna-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a1fe9878670df93aeeee8558080834f4d1995474c5ec713b4b52e1e76c27c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149239 Malicious code in vulcan-hyperion-wezen-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4bde97fb95eb8fd706bacdbddb316675d58a4dfe2637b9985eaad26c864b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-antares-writable-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26b78aef3942d60119f4eb9ae9dcea573b79c20d31c8aa198ef687ab7d493d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146356 Malicious code in polaris-module-quito-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9382084f565f8462c83f796725627277f976ff86d5c8fed186e7f29c8257f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-flare-warp-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ca4cdffbf74fc39997178a3df0ce4e717300bc5fbe041fee70bb2ec0a90113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-nashira-lint-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d055b3ce56e60be0bfa4969d7cc1a5e2ffb608a61cdf2cbdfd339fefa11ed75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...