MAL-2025-143980 Malicious code in json-prettier-stylelint-leda-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311240dbdb6e2255d7827b9b6f16c5a351db73978700f59d2e023bae65445316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146704 Malicious code in protractor-zenobia-npm-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fffd5854a17d7b9cefd4422eff7eba11b7fb2eeac2286356ad038845500e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143098 Malicious code in grus-polaris-cressida-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba26fa4dbb1e602577b4133c013d196b716317ba0da07038cef37f6f9ff5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-betelgeuse-frontend-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3dca50663543b5cf7dc24fae502a6de9e183de1a7d880d65ffdbced035af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-quark-native-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d573b248cb4590647cf0dcf614db037deca09356997105e212cb80e7c7dee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-inquirer-webdriver-mocha-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2a926174d560c4a0280fc751da44d37f6595ed4f96e833fa6dd0cc2b1b17d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-leda-lynx-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a62067cc2fa7f0422966b16a4e7a7bcff6ae40aa16597241ef8c0ac9db526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-build-rest-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3498297925131ed1b8171a1c2bb9f862b0906ccd54e5f6d6977cfd3f034f5333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-fomalhaut-server-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c46c770aaca79b57215acfb3c4b84798f3c7a29109cbfeab7c2cf8ee184814d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-unuk-cosmos-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce898b52c94e42ee07b7975ef14215d4954b631a47a0c5637fa525a9742b1800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-charon-pegasus-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b7e01fc3390efda5a9efa37e7d1917a9fbe55cd61b8a33611ec40ce69b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quasar-quantum-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9677d228e7eea18d47b9886132ba5dbca5bca647362142479585ef14b666d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-aurora-webdriverio-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd116482f862d5f3ab2080afc8cfbcff98844d056b64d8956827a57d4d93b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-jsonp-bunyan-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4878474e99d5edb91d8fb230e904534a2e570b753da800d4ca7f79b7ad3fb913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...