MAL-2025-144775 Malicious code in mdx-react-bootstrap-react-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ac8de44fa35aba6659662beabc7f831c0439a35428e5690362dff458355543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141339 Malicious code in csv-antares-halley-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aa934e84ed908ddc435863535aa884c4b9c09bf009834d8032caa86810ad36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147105 Malicious code in redis-izar-react-bootstrap-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6cef921bda83e71f83929fb9be55ab26d6215bfeb47a5eb031441652b002d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144618 Malicious code in lyra-wasat-hugo-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ddb3ca9f6d50990ff21debb589c168ca2cffd48db3c29db36a304a8f329a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-gulp-ora-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d843e4caca914f0ff69b775a2372f42a523768aee1e7918f4b8c6d01501f8268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-bunyan-tool-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-redis-bootes-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab3da84f1a9164a7140d015597595bd0fbd9955000801582a5e659863835325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-europa-cosmiconfig-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e94727472b697261d44aebd687eecf23acd902dc00f4fc947fa3caa7b30779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-dactyl-celeste-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af762c09d8dd6efc667093f87bbe59e23830d072f15c7020ef8e9eccf43d0923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-cypress-chromedriver-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da52702d2ab306157f80cbc575c6437ea3e16d982d6dfc3a6d87f24cf357e7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-sedna-callback-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bba612a2c27396bdd6c0082f37a7b31d445c50826d26dc620a866316eefb7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-dotenv-safe-xanthus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57975ca82a0703ba75f441ffa6b0399f3aa145383caba60cdab563bbf3341e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-markdown-nuxtjs-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad6874c7e2400099e1265a13d17d1878923c6efc8c4f2ab254726f668d03798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-loopback-ganymede-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104427287b6201291737d63904d566b88badc27604dc3788a575b97b3de23343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f105b3dd515bd0a46c837e65d9a353f5440a1ee4d2bb6b1800b64e2f8b2cb81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-eleventy-eslint-plugin-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64593aa2f22548ad3c6bc1af3028c102ec42659a9ca45334c21087472cc2150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-enceladus-pegasus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922dd32d2c25215ae03fc12f657554932a92be0caf2e526bdf50adbb6271baf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...