MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142177 Malicious code in eris-miranda-csv-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08de3a8d81298ce8a508487d4353acf11b5e3fed26f67cac0a62919a1ba1851b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146269 Malicious code in pipe-release-it-hermes-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463e48d072f87e12dcefa2b95cb79861ba03d5bbbdc8dd98e5490abf583b9d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142773 Malicious code in gacrux-nightmare-electron-builder-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4014bb2f2419fca4fca93e72a600a6fb2d56786b81f6dde8040e3a24004ef7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145130 Malicious code in mongodb-halley-pavo-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d80adb8e3319f874101402502a070ecc2ec48543eeb374138509cd912935ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144256 Malicious code in leda-andromeda-spectron-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abc359754b3b2e393fd80d4121b35f0c9773f28d7e42125af828ff7505287b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145639 Malicious code in norma-cz-conventional-changelog-changelog-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72c73c24102a1ea8e836ef5ee6740a543a940fefc68ab2f2ec513b98fe55f57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-virgo-less-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a0a6b7d9a44c8952af3e3dbb40af74f2ceedec34b367f51a806d743e9bc64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-configstore-kronos-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fbe1c2b2cde5513e863fa8fc192ed8bd1e1098a5964c8016c02142c5a7d565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-oberon-resolvers-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643f07dd9d57dab6a0026c421c766bdfaef2aab35236f4b0373b185967b47b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-mongoose-corvus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b778f62ff3e50c7e087b010f41e56a52e5f270155f52bed36a78f8f40085da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-hapi-nextjs-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc029820500dd4024972c48dd57913360342c872ec20c9566e573b7bfa03dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-browserify-public-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d323d7c84f5115e992460072410129438f814ee9e3a999918e849edbe98e5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-cressida-wezen-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c325aea0435d135ada4d781fcd39f53000ae8c2fce613106b6a0e4fe51ce8a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-zenith-winston-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd50777e50a532469b958bf7a7553fe06e2abc0b0bbef40eda0e4ba56e523080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...