MAL-2025-146972 Malicious code in query-middleware-promise-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044b110d5059a083b5f257a7ddf21a013cab764059814d3d97445da282705cc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145908 Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148021 Malicious code in soap-hermes-farout-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d131eb3506f7819a2909c8e5eaef9a13d9239152771ddb1ed7a40803f726cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147953 Malicious code in sirius-gatsby-subscription-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9893a805326d97966c1675d8e4b2a711528e8eaa5a954e8ff750210898f55a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143151 Malicious code in halley-jupiter-norma-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcdcc66191a0b741cc743c102587a04433fdd67757aad07d5321a0f3eac3af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143813 Malicious code in janus-indus-slides-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef056ed0baca29f83009d0e395c62567862980b09b39b60559331c2dd19576e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141245 Malicious code in cressida-soap-atlas-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa32ebdf6c7a36c0fbaa79db2bb78384213d5a5f64c6f78fc4f2811bc97f85c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-betelgeuse-frontend-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3dca50663543b5cf7dc24fae502a6de9e183de1a7d880d65ffdbced035af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-pm2-deimos-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9dab467d508ab409b4e5d6bb31c1abb741e9efb26b754d9f2049fbcbf176f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-leda-lynx-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43a62067cc2fa7f0422966b16a4e7a7bcff6ae40aa16597241ef8c0ac9db526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-unuk-cosmos-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce898b52c94e42ee07b7975ef14215d4954b631a47a0c5637fa525a9742b1800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-charon-pegasus-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808b7e01fc3390efda5a9efa37e7d1917a9fbe55cd61b8a33611ec40ce69b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-elektra-alphard-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7d22533d420b889973435226c3b0b684966479192d793f2fd1b62ba75ad695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quasar-quantum-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9677d228e7eea18d47b9886132ba5dbca5bca647362142479585ef14b666d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-aurora-webdriverio-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd116482f862d5f3ab2080afc8cfbcff98844d056b64d8956827a57d4d93b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-jsonp-bunyan-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4878474e99d5edb91d8fb230e904534a2e570b753da800d4ca7f79b7ad3fb913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...