MAL-2025-141097 Malicious code in cordelia-chalk-warp-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c68d77b2e4bd7da1bdfd033d264b648eddcfa07a88b91b57c2db7dfc573149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149676 Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144887 Malicious code in metalsmith-polaris-browserify-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeca10eedd2868420a67a14a83dd8861e9350b5413837f1fac9c3e8496cc52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-geckodriver-virgo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df34a5fa534cf94f6e93a77a4d3a03bdfd2182d55e2499391a58ae3588bfdd8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-prompts-meteor-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab93fab7c2840eeb9d78277dc25dc871270bad87bf27cccf35509e1ccf9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-phoebe-commitizen-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c7087b7b287470476889ddc426136442abdab2d013c904a1f9e9d558f3cbdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-publish-scripts-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81282aa28d9bccf123d240cee4bf111537ea0d82423e076ed8172e42b0f89210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-kinetic-meteor-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656c9560ccd17e180daf4aa2254dc60f3255420737a36176c05728b8fdec1786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-sails-celeste-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef30a7ff486673f6489f409abca3e079dd979bc23c287b2d198e1b0ce77da7b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sails-element-ui-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f497ce3381fb671b0eeca370a269ef78cb9604d6165313910b3d753c12db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-galaxy-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02934da1a26beaa527e0dc78a17b97871abc9faa5d6644b390f36b5ba820093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-pegasus-library-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a426ee6e9521bebc28daf065df779710592df13309fc8ad43f08f70caf3ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-mocha-hermes-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07102cd37703dd714aaeabd074e6aa1065968ad2251dc5f76e87ccc719794db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-apollo-ophiuchus-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1ff70c563ede2b3fc94cde3fa8f010d80a9e52337867ac9a8c2b2a2e78ce96d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nestjs-style-loader-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ead96a3c959e7edf3cd9bbe01b3683cdfc8844591b5aaf62c39fc03d8343a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-concurrently-fomalhaut-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f42ebaa574e7ee90b1b6d3611a83350c54b9886394a7d37a7ad315af7a0d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-achernar-babel-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216ae8f8602dbed565afeda662df33d3b107653d5903360708f4ba454d0ecc85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-express-playwright-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb17399521f39eec5d3c3f8c312bb8e5218debe3c4ad158eecd500a1806e988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...