MAL-2025-144766 Malicious code in mdx-gemini-miranda-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f28fccc481744cd6741ba11920c2b73942570a19cfb4e00807f6b56f3a72266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146163 Malicious code in phoebe-mongodb-css-loader-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a00f85415c125221be192b7593c512d4ec86e74fba8dc5716204f0276c44d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145132 Malicious code in mongodb-jupiter-yildun-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b701429c95e4cc5ad557d1dbf0dd0087caccff3567a9b6165ac828df8fca6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142629 Malicious code in fornax-leda-algol-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf7319a670b7da559f6482f696730c1f657141bb058aebb8a53aebb164f1914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148230 Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3d06c65dd6879c5a5f056def2f439bf2bbf1c84c6df10a32dbdfebb777c6615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-triton-element-ui-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d790e4c59825ea9cbfdb156aac422fb536844ddb3ac72f22fa69562dec2a150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-fetch-quark-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3e4a30c69607b6f0cadd046feb617795bf04607cc2b4dcfb78083360c2a8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-pulsar-postcss-loader-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-tailwindcss-websockets-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab3ce79ab60b14a507ea4301474169e43aae698fb034ca86bd2c14bb260fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-event-winston-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca62e2d6414ed0efda22dc45da9e9f2d5b43e9efcbfa092dd84761726126c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-zenobia-javascript-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2442a2f792bd52751317c2d99d2e451ae980812d3b156f2d4e8ed8ac4e3897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-venus-galaxy-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d2fb7f7af133dbbfc4e97be93b9c523d8332080995751877c6e8e1881fb53ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-auth-thuban-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c3046a640463c0c5ad0bbe94e2f92ee4bb4bdc71323242d72796c0d5abed32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-local-typeorm-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4482cf83db452cdff612d207cc3d09e52fe887e377776f0cbc30a97f2883b914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-terser-webpack-plugin-polaris-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0152746bc7187f5b2e16c25a8ebde8b0e0bf3b60bb7c0ba31181138c8c2bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-ophiuchus-kastra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f1167ba24be7b9251d59e542b0593599d3d543aacc86c2bd0a6b7643b4babbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-delphinus-grunt-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7dd9799d731cbf6da4d1a81e6520f57583f73291843b357414d2a63c31c3fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27adb475c01b655934995cdcafe5af454454fbd4beeed4ca694c1c812cbac919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-markdown-pdf-epimetheus-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e913e8e88606bad29883aeb6ff037fcb4ee1f10f0bb20215bf29faef5969323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...