MAL-2025-139230 Malicious code in aether-deneb-upgrade-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f6c00e3e89c4212a8ebfd8666bc2f8983c4e438a26efa2c2358e75f383953a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-link-hexo-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ace35aa042e4c1e8ce0e8f8e3cfb3e9aa87b4a5d850a6683fe0482d10d7762d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140668 Malicious code in changelog-epimetheus-playwright-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f98ec24c5fa750bf9b76460f81fe16dc5ed8f7a8005aae5f8a1a60e5520705c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142407 Malicious code in farout-delphinus-wasat-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d8eb4fd157d99907ee9c9382a68a664a9abec27f6b53a1e2a784d51166e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149715 Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-nightwatch-toml-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435de88664be232d1fa2feede964a493b5f441ed93ccc00a9071264916de5951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-pino-uninstall-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146569 Malicious code in process-selenium-quasar-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c223c3e8c566dce16e6ff836337eead79651732149440d97da8f0b3531aff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143756 Malicious code in izar-fusion-thuban-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f9670614738f516319ed0a6688e53d7e0a4d3df2f4d2e7ee43bfe682c16b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-xenon-husky-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7d1bd50d9c8416602a17b688245f7351bd6902d344f1e90e6d579dad1ebfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-carina-iota-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ebc54a6c4ce6014709deaf1289cf4baafe511737cd62e0fe961e77f25872b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144653 Malicious code in magellan-mongodb-fornax-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70598d3f2d4714da0773553f94b820f5a8c58a903b861bd575151ebcd7b0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-envconfig-bootes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f83987625a5b22f96ded6fb57b3a5b08594ac3a45b079c63a6905f3a226dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143054 Malicious code in grunt-bootstrap-mongoose-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02da5fd610445f9d8951ce43052f42afb6e06fb32c013a06f436322f3aac6fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-run-script-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe781b616783272336fc83c52ff140f961736366976234f8bf7a06d0ac590387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-stop-solis-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604e6dfd483497d82c03b53aa28709fb0bd1b3c4692e4a3b5af4259d9b7041b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144499 Malicious code in local-sequelize-spectron-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a39a04c280b71bc9a697c00c880362eeadfc5608b3869515b2c571eb798f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142346 Malicious code in exec-jekyll-redis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebe6769e033cdb34c98efd5c14365847f4e0ad6fd40b98d87aead05ce274857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...