MAL-2025-141871 Malicious code in elara-css-loader-tool-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcfdab25bdd37fdc86ad0a8ca819d6a524ddae94fca9e2727215f631b725a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-apollo-oauth-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b3417cb0939af2d7ef1ffe7ef71b3fc5def7e905d096c43f0169cd5108118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87256c644c630f974d1a273be5c953ef8236d129ffad8560fa6d5a92e3f92719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-scripts-avior-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5b4797f2b0952deabea1bdbb5fa58d322ca777e4ba13455c2c1d2d3b9bc154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-antd-babel-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc0b97c319bc0fab324346fa6235b482369da554c688d9c1557de6fd77eabf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-prompts-xenos-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee820c35d475c176e55f15d2ab1c6e6291ac53809a568f4ce77a90c5700fd41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-backend-hyperion-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d599aba9fe19b87f3943393ecd230d276051184bf752cc0349302bd40a0357b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-nashira-xml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ebf92d9869e82eccc178e12492d8e5bf0cbe541283713059d686ce5789fc7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-eclipse-metalsmith-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb8a567b6169c24bd6deef07a712d7be0b560e33e7167f55dbb701734528a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-magellan-pino-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0fbea7d96285ada88a9c1fc18fcc5fb1cbd8f4fcbd03557f53a3fd2844737b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143486 Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-spectron-transform-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7699ee15c3365e2d516a2c2c0477fc547aaf34fd773ef8b4137ca6cf01a765af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-elektra-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec8ece53180670f01716145c00b47d9987080d41885ae0c91d2bae340e797ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...