MAL-2025-142687 Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-repository-miranda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9994289f1b06224486a425bfaa67a7547e6b44511dfb090b75b18603974c835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-gulp-socketio-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5145d9682743031b8b7616fe119454d6603e023db328a3b4a5a52e7f22c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-graphql-miranda-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294a60f8bc8353187fcdc637762aa04ae29fba73de6a28272a0e39cffb15dd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-oberon-dotenv-parse-variables-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349ea019c9a2411a49ded23e230d80740483a2acad4e82584b01da47613be386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-style-loader-sqlite-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb98b6dfeefb2c16b296f59869bec9e0ec675ff89d8058fa5216b656f1b1331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-bunyan-server-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba6973f52a63181e3e68ed68ba75c24c59287e638797dd3fe7f6afe8254cc2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-stream-chai-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-markdownlint-koa-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140928 Malicious code in commitizen-csv-impulse-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9b3fc630c93a6b5abcd841a0ea99789e5e3c89feb5c01aa57716144c2665c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147777 Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141809 Malicious code in duplex-galaxy-postgres-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e258dc5e9b5fb277fc19f420f2898fcc42e171ed175cd5bb214e6b80bea57e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140030 Malicious code in blaze-release-it-cross-env-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035760773f3f844c226c558569ddd03e46481efc0be79bcfc58a3adea2384f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144160 Malicious code in kaus-vuetify-deneb-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fefb79e2456ee39eaac3f8098f9bab91b03aae22ed83bb9fa8faf7cff8769ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148586 Malicious code in test-umbriel-postcss-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7653aca1f1686de272649e61e1bde312c3bf99f0ef8ab440834e77b4c521883a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145398 Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142026 Malicious code in enceladus-delphinus-spawn-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16313e0e5d3b079b00c95ac4307930310b408c15c6b1edc2f86d661ee9866a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141443 Malicious code in dactyl-galaxy-quasar-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86057f9e811638ad1ceaecfbf45565c63cb2d6021f27fd1e67c878f87e002e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...