MAL-2025-145370 Malicious code in neptune-nuxtjs-axios-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb640a07c1b1d1931c574b6445894114b1830e75f96fb8f44699becae8e49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139887 Malicious code in backend-foundation-prettier-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ae1b2df0ed35268fefa4fe80a912ce0b5ffe7c7200b7706078f02c9930d888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-publish-rigel-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad41b4f77799c536644ce19f2d0b364a90968668783412895a1440eb38afd37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-docusaurus-postgres-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86bcf345f5ebad91a43153328a26edc31b5f6c613212b4d22fc7796758a597a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-express-pulsar-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148066 Malicious code in socketio-webdriverio-mira-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6da89110ef3180e4470deb1d394bd94462f73c05afdca30d9e62cd95097f440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139204 Malicious code in achernar-spinner-phoebe-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d399212cce44da716b4453d28a2ae282d63b656a01555bce4c82940730649661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142650 Malicious code in fornax-react-bootstrap-halley-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b32223dacd35ab47cf7c3655704b015d267fd64014fdc9c9368091f01225d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143801 Malicious code in janus-callisto-colors-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbebae1be459a44b6204915a1718da722ca6919bddd78b6ec4410cd9fb6cdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138691 Malicious code in equal-scarlet-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865337e196bb57a9e9e0c1ee0c5f582418cbb2f57153141c708f9c6bb874d09b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138895 Malicious code in new-azure-grouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da81101753f640bb6bb99ef7b9b99d6b8cff26989321016e680c4664214d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139105 Malicious code in voiceless-gold-ferret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53227d519d545eb1eeec03693e824b3cf3d6db5cc0855ed0b7dc214fa46cfa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29468599c251e67fcde9e4b81ce3060cfd78e970c45fec6fc2510ebc1246ceab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d226b7fb0852dbc52c39e1f9cd3dd782b7f42056702776c14c6cd78959d4394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specified_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd51f83dc69d21de933f66be02456741c367c9999ddaac791d6ccc7f1caf55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136047 Malicious code in okta-ketan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36cb88d455c3d18c403d061ccea14a825bd5203daa00210dc69eed798230dff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d2e8d12ef524085f5cb0befa14c80d658115663728bf332695663b2b688a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68f4acee61152fe0ceb357f6f0ebbd9c7235da6446295403d54fc4c65bbe4b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...