MAL-2025-148944 Malicious code in umbriel-mongodb-pegasus-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659c7ebb25050f6cc449c809f7c3eace227431e179d516051f3a1aa1809ab659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ee18d4709d88ba8bd65ce29f6d0c2c42a6ec04ffd410f7c61eb189f5442f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-publish-rigel-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad41b4f77799c536644ce19f2d0b364a90968668783412895a1440eb38afd37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-nodemon-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-fusion-relay-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322db6c61179b5f1ab62da86bf27d041ddedc1906655103caf797881f1b9785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-despina-ganymede-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08487eae01616838ee0af25f1ec0f33d36b67a802b28b68bd65cce837dd8369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-express-pulsar-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139442 Malicious code in antares-supervisor-kinetic-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec376c7374c21bc6c2e7e7526708b9be627909142b8b6f8a4880b647e44265df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ongol-ongol70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d79d0582d8ae0ad40aae9667d97970c5c9118e205b7e1413301e400bbcc57af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-lapis21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce0d12cddcc32dbe5a41f1049a198659cbf369a1de90e3ffb25e937d1c639ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-tongseng6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38bb17a3b2995c9f8ee3f3b715c504cdf56b23a6d4e2b220e588ac842014982d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29468599c251e67fcde9e4b81ce3060cfd78e970c45fec6fc2510ebc1246ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132557 Malicious code in clever_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fecb54c31b4678c006ac821643108776546f304e071e20567ad414f4021a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2e8d12ef524085f5cb0befa14c80d658115663728bf332695663b2b688a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...