MAL-2025-147393 Malicious code in restart-quantum-venus-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65b610d5d796848b0303f14ea0b4fad513afe1272144ef4f17cf7e0a7b0f83e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145358 Malicious code in neptune-eridanus-dynamo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04984e267193cc3d939a9ae85ec1f22e219b8dacd45b35cee3053f79a7d63619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142339 Malicious code in exec-firebase-iota-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94332727a2aa8c02e041f58ca774af62ff4e6988d385e78bdc86956bf5f7f31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139407 Malicious code in antares-epimetheus-chromedriver-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf16ba048e95255889c5ed8190c85f42d4544c094dfce96a156909536a2c8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143070 Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142287 Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149361 Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140045 Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-css-minimizer-webpack-plugin-local-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2c81158c907717901718ca894e86e52cd0ff7bb06409578ce68b8cd5a40ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-celeste-slidev-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42c639afb347d7ed48126244240c893feaf0e464a8b9357fc1bd5d35cf6d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-bootes-async-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd26e69c3e192ded739ff679b22feebc040ce7ee70091e860c1087ad35dd6ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-restart-json-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41280a8da14a322823f97291d98aaad9f3017b4f30f284c3144484b75a1fbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-cressida-commitlint-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46504f4252ff87ca260f5be757ce7ecaa3594bf829bd535705879fe64ba14f4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-iota-fork-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2e6dbb25e8df909f2e8745754a5e1c6dd9726eac927c26461505360a78dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-dagda-antd-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264c22b5aaf174fd3e7207d8c30036247f754b17db2f75f89a85ca62322bbc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-impulse-google-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64253d98a3b179cdf618b13e89d5a5f95ef849bb79e9b3defa67808c704664e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-atlas-hermes-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef430981ccb016d5bf1ae230f4790307b93b95f5a63ef060bec70b250b663ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-stream-jovian-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20405740772ce181d90facccd90c40f356cecd0738d253ea147949d065bcedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...