MAL-2025-149676 Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sails-element-ui-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f497ce3381fb671b0eeca370a269ef78cb9604d6165313910b3d753c12db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-terser-webpack-plugin-ursa-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058ff3c61f26380211cb6100a4dadc0e5377421f361087f0ef9fc8e44f437fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-kronos-kinetic-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 831a60a684a5c73cb17312e4f5ed88d21f0bdc5e97565bd0f3ecc1c9a882d908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e6b7854d6337054e86865f3d0eeb753d04fc6c8d638b25c469819ce5daa294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-mui-scripts-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000646b77a1119bbb3b3a76c92c2217a75d9894c9eb5228d4cf33b492d0e2e25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-nightmare-ophiuchus-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8116427ece4b8a616d6551cb7bfc44e011193dbb61231f89960d1f91a2d9906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c8f5ff036967a5e3b226fc20d99ae1fecf14ea93e18b4e9863c82e5c82e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-celeste-jasmine-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a87533a11e987b5f26a7ade14149ad1512080f19238fd182c99df99b246cb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-altair-dependencies-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721480bde7839f065da67a511979ff2fad4f04e3c8f683f814db27282212288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-perseus-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02c01d851b7518dc08365875d2faf898162379eab5f57f890791a44de7fab39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-norma-thuban-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a75ce577389fd332b3db5687497106b3602eb875ddc4098e237e88b7712e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-kronos-aurora-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02998f5866080f53cd6472b39a98ec84ad72333e9427068bd1785888188c3216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-taurus-browserify-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232bd8b8068a1ff13d4b4659cb36d3a3e4198a36dfc4c886d84bdf7445daa6d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-restart-json-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41280a8da14a322823f97291d98aaad9f3017b4f30f284c3144484b75a1fbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-ursa-nodemon-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c8ef633f483964dc26c0274ee176e28dfbf8faf7ca47094bdec593aed66d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...