MAL-2025-139928 Malicious code in bellatrix-centaurus-toml-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebdb2e51245207a285797bc56d9291bf5876105e83d7392badb56818a5c0e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144675 Malicious code in magellan-webpack-global-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545c5ada6135a1efd8ee85d3182f24385c34b4d5d449063bfdced4cdb058754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-oauth-zenobia-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca34b5a806b10174de95de137a5137510d15a4c520a3ccac203a8f138266226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-aquarius-pm2-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63ff7207b8b657c40f4d23ffd67072171e865286ce3c9982e9edb02ab468b3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-callisto-oauth-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb5d62c0d246d9201d77e51324b2e594d0edc2bfeab4f70f8c8bbe9629df860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-equinox-achernar-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75261065f0a6b02ca3e374fc44540af758f88fa9649ec332f7b2c9b4b226f83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-chalk-spica-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b881fb56e4e5e9ec3ca7c82173f3ee21d88ef3c5d395f2dc0a52edd7b49e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-winston-html-webpack-plugin-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533d17b064934bf10be2328e4f60324b7af8f0958bb35f3d23e89346174c51ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124fae100d834ecd38af354ea48768894dc6d768b217b345c0026ce633a24f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-impulse-dotenv-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf6f1a2a1a9d838f6166968db292f3595c76fc758cfcc26f5beb1b31df51b951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-enif-auth0-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427ed232764f2b67603cc11f0ccc8394657761c9f9c9f6a180ba3a03053e8411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-antares-altair-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1dd19c2038ff973dd2b4ea0902b25852272ab1db03e4ddefba38fd37d87ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-janus-solis-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d32b29fcfa0498839d01be9c4a856f8c419b395efdc5d9599ddc46cfb37836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-octans-venus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571f015c46e84fa6fba8638064826f599bbdff229f5ad4a15ad7405eddb455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-europa-antares-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f35a750f1e2d39ed65fe2e942c757ae4f634a276981126b42542894e1936b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...