MAL-2025-149113 Malicious code in venus-hermes-lacerta-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79996a3e99ecc6f49fcc9fe9b797330b934a6a4067b96327cd37fb554aefc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997cbb9644d6e2a6ea49c021e47526c36a9c49d25715d531b0e999691733fd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-toml-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-firebase-less-loader-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60351adb0546cef9790a9625fb2dbb847f363ed481f8fc352d9657ac57c8b3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-configstore-quark-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b29671555e93fdc9ad7382438d2ddb9778094ea0647da33556c9a852b3c137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-heka-vega-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383847364a4a6c5347ff15734218a9aa69c6613e8c82fecc6e11e4bad9d1563f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2939b8efc57b0447f1e6a1c6ac30eb1b3c5f6a835d155211f5ef7e8a4b2a4009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-commitlint-config-angular-ophiuchus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3224b81b0368b1a9c8062355759b2499f2e030d243d5f932f91eced78b7e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-markdown-less-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7db5253c6ebd1a1cc5ea1ae957011e9cc7ac92f16d87372bd1b995933632739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-impulse-geckodriver-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0618ce967e87623c467784db730cc31e57def2ab1ce14eacec960f92e0a40d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-node-sass-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e81b18803284efbb1d7493c9733c7ea8fb01527a0f6beca5143224cb3996ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-child-process-lint-staged-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d03a106828f6507da5ded4d486c87ee74293ac205b21b7d112739c94a367fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-semantic-ui-corvus-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542b8da9f5521fb24d5e53f53645f4fb810e158f42eab400a7d5badcd6f44895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-sagitta-arcturus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f263347af926c75d89e614c47c34631945ba0c0b5b83d24cf8f13a6213e2eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-repository-pino-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdee3ffee1d89db096308708e2d9aa183d3687f0848cdd526e9576ca308d27ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-non-blocking-local-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67641d12fdc161480820d3a63df54f1eef550a1949b022c50341ee48f04e24cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-nodemon-lint-staged-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a64793cfc067ff071d4900d58002ac684aa22b19764c3fd61c0daa0cf3e4b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...