MAL-2025-141895 Malicious code in electron-builder-aldebaran-betelgeuse-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f931c6a986c413378aa543184df78de854ec169ccb0a68ffb6399b50edb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-elara-relay-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55997285779079206d39209f938d28c698c67eebc5704e9a8b02cafa6a34d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-fornax-betelgeuse-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3404c1a6247e9db097e33c1be9d5720d9c12618365536e813f891f26d2a35942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-miranda-despina-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419a8fbc6fc410da36fd23007851d4f52fe1bb11898f8c3f8cbacbc2e24103ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-helios-metalsmith-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb87ce92ab285b72ad75a25b3357183a98accf962cb853dcec26bebee2f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-rimraf-subscription-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ae0dfc03d7ef3da474f94bfe9820f5263c24effedec038236376a4ddf6da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-dotenv-passport-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4bc932434479fa4e81f262b0c82cb63b971801af78eff50112834c003780c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-indus-cache-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0041c45b1fbc9629082aa3ae49b8c69276b718ce4be4e5e9fc13dfe78a9f712e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-dynamo-foundation-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-docusaurus-postgres-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86bcf345f5ebad91a43153328a26edc31b5f6c613212b4d22fc7796758a597a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147041 Malicious code in rate-limiter-jwt-webdriver-mocha-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e04d7f7b551e7e6f9fdb1556df939ec9d20f1e327e2f91aab3dea5792b6d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-eslint-koa-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3f0f58d2f73595ffcb105ce5fb3977d91e5a5c7bca9d99dd92da82d2923b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-firebase-iota-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94332727a2aa8c02e041f58ca774af62ff4e6988d385e78bdc86956bf5f7f31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-delphinus-umbriel-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc77480c85e2dc600bb9dd6a059ad4740573e114bceada95a408d31a4d3eea09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-loopback-sequelize-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41931976c004d89c852a678bc51be3e40ffa196f8850fa53ff966d073391c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...