MAL-2025-146655 Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-version-procyon-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97544eba7708c250bf0217a4d6d35fc044a7f24def761a2704663da20a4a3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-nestjs-csrf-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c4b1ab196632f9b6ebb055a9b0a9b392674ce1106cbea9ab8310a841e11e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-rigel-wezen-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33794057c9b67622435866807b42bb0f7b61129614c9ca0cd1a14bf2ff9caf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-airbnb-morgan-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9c51f5e40a4ddac36f8b86442f212499800abc1e1634abaf64c3a22798a8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-zenith-flare-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5457b432b98f1a1c93c0545fcb9a402ec65ced668164a76265adace81149fbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-xenos-equinox-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f00ee715a6b212756150541df12747f82da8999758b0c2a03c3427413e7677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-subscription-hyperion-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab658b5d1b09c534e627e2c84470d76e524048050405bfcca968ad892688e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-bootes-ophiuchus-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d335ce2165764e93693d3d7616b0169e0e70fb7cbfdb95080f50e532fd7c456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-barnard-server-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fcf20659588f41f80abb03c011da01e1bf19d78058387446b81977e811089d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-dotenv-safe-nconf-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6467b9bf9305267e3f19b3326675b76c09277824481b4e1fca8df8bed48f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-aether-weywot-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48dab33852884bae385c8ffad0514bb577ee6423e5bf44bd4fe4a377f2bae5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-eslint-config-telesto-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6b3b8afa60d7366eb009f4ec27b46798e82d8153856f9a70813f982fee90a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-mira-regulus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b1011fe9a27cb0c75ca7c8104767156628e1213a93bbbc953d3b2d7b7214a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-zenith-pino-pretty-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88e0eb585e086945dfbf2008b4da72a58c538e8c2d3c8381af73c3b25181029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-meissa-mini-css-extract-plugin-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2459c79d8b788d5176ad830632ba8bc2008ac20d2c3fcc62555442cb227c787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...