MAL-2025-148234 Malicious code in sqlite-orbit-xenos-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c86265633b4b5b2fd5f73dca2afde3e2809e8e36c6b6783188ef1057a4bb075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-less-loader-proxima-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9990e1765d440bf612640ac1188e994ca86abeafa12c1051c9ed91a2d9acb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-halley-sagitta-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d580f674707bf205efe8c26f14ef04b8b01cb8a5559944bdecf85e74c6eae29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-canopus-promise-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23d07545c6bf65617bc3e8cda0cc53db851598795f0b98762db3ff60fef82e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-mensa-public-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c13e568f7a5b0b22ad6c893e61262a0f930cd561b8640a831a4153fa174e88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-centauri-helios-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd1d46cfb1e79a472555538c03f5c65bfa51c324508eef833111f42ef5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-repository-uglify-js-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9450e460da60e016b7b255ddec614b5fe0154f3e89ef1ab9d4185ec78b6a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-configstore-janus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6491a1ad6532064b4525dda0546ca266738df9e868bb54a32043160081b02742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-antares-wasat-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17793dd4545a736114649086e593003aa80ac3a044ccfcefbf148d2d89f9a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-miranda-hugo-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d719f466203ac256381e61c67b5979ea11cc2ca7278330ca055096e9ffcd71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-vortex-norma-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d27f7868efd1778340c9421225ec34498491ce2f4940a49e2df3a0c77f33a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-izar-polaris-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3434263b89a3793bc4b2384fbb40a07306dd0fb9cc2976644bab0b3641ad3ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-babel-reveal-md-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67889195d0a7f7faa9b2471bc984c3cbdd40d26c513a65cd5481a6b7f005596c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d7e968a0295c0187fef5d43373097ab9585a396b4ff347bbfdd5347a05b365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-zenobia-procyon-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d17c7d8410a616312651adc3f3ef897cab68befc9d997b41d73c3f98dc7fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...