MAL-2025-149864 Malicious code in zenobia-castor-mira-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cba6b21bfd9eeb8f71f56c95dd21cff743fcd6f03b604b4b41e6004f779cc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145533 Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-meissa-soap-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6109c4527fbe0c61110df548c7dd0fedf4f49d33856b8df215dc9363bbd0b512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-scripts-leda-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750893509b504719e994b929fe1c82872886c9b6bdee346c69b2861bbff32252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-xanadu-bootes-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a8e9f820d9fdcc7495d8be7342f3bc3b30c703f968aba70bde677cd39a879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-docusaurus-css-minimizer-webpack-plugin-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77bd218322e86db28fceb788d64cf846a6cef2d7f0faec2e9ffed93d116f446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-prompts-pegasus-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dda1fab30f9cdb224c6c52023b756f44b91b0d21d4e6f6436b9b8fe36f7b7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-mui-vuetify-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fea18858567d654b526efa928293815ed1c7b63c908f9fc3dc71e2f9f7ed1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143099 Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92c00f4e6be82f73104ac4b5a4fd55b9981d7034b9a4fab5d5cb577c6985de63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ursa-triton-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe6abaf7b95539a87fa51af803b1e73749edcbcf422918007d6ca8e2ff864a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401c0c0ca553872fa48d5cbb6954f3314f7e977b5dd6ee50218468026d0d7581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-oauth-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942efe758bf59cfbd35ecde32f1b9cba47a8915da2bea6632870da311e5ee031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-configstore-node-sass-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6b9ac0075b325abe952216f78ce9a11d4101d6d1aabdbee5e7aff20ac8216e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-titan-geckodriver-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 309048557f80f69e3cca66d2b574290a645f381dfd394445ea4df7d85b69af60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-ursa-ganymede-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b82a1870f0af524291e5d87c8b3202b4a81455ab7aefd3a9fa1f5cee925f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-supervisor-child-process-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3228854c092c2c2db97fc3ce38d83f267b0a435bdf30b7d446f564e17838650e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145519 Malicious code in node-config-sequelize-nestjs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21a3fa52b67b1625918b72e412baf8bc909bf559136d77e78c49538f4a634982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kacang51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2e467aa7c9f5deb3fe3d8b17c38b00f4629413c77e46568209003203466497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944192ff9a099b5cb461c44dd8fd731a7975f3f5f9ee1505d86927aa9d272ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...