MAL-2025-144936 Malicious code in meteor-shelljs-miranda-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6546914dd8fe611917e0f0472d9be7368d424b3c5e5960f338667205faeeeb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145245 Malicious code in mysql-farout-morgan-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d17d6cca1564673afeeac69a3122e8b70e262fad2863a5d0639b1f4bc676a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147198 Malicious code in relay-cli-altair-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a88c1148bc6d03957adc5f14fc2356827388d91789f457e822bb2daf418bfa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148850 Malicious code in typeorm-materialize-meissa-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7431473a2a7d044e265be1ea3717a4e6f421228d6e8498e8954d81e8b54ed221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144375 Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-turquoise-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d331943744403a816a9dfcefaf6cd03296c4dabdb773aac590bbee69ff6c1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-jade-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecb2ac8598be651c2152fe5a20f5c14e2a21f21a99441ef5bfb2abf379613b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-scarlet-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130fa73116bf0363dbecf9a3c9d04adad4232037eb140362b50f2c64c007fef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-coral-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa2f011f5f42374fa81d64113d44a6a3a744961ecd03c25bade994cbcdd3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-blush-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e709e96bab986c44dadb6fb6c7de4e78675b81995e987bcd9dc3d6e00e22960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-violet-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50135ad83a162ed7b6ea016caf95136fdc6300729a22c7cc0c2469eb80bbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-indigo-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97990c3dbd394d32a692511123a3cdffa4c9e1432225671b64623153e99226ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-coral-caribou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c08012984ec3c311cb9324d108ac55bb472151dce64bbcee684c95fd2696032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...