MAL-2025-141538 Malicious code in deneb-centauri-pulsar-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a6526bda239de64c4d9457ab972fd6ad08c667ce2fed1a79a3cf3f4a444fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140558 Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145900 Malicious code in ora-yaml-yildun-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09671570cc0ec4dbf6e1be086b159d12ee823cd32564bfae08539f2b51fce710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144802 Malicious code in meissa-cypress-acamar-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2193c4d18d2a0b0a1bef06e388fdbdca9747601a368559fdf2ac154271a66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-vortex-helmet-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b6fd913838bcf44c2bf7b0a7179956fb82c404889a6981a97c5a3154c6604a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-tailwindcss-lint-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7793f784dbf0e8bbd0dd0635bff3e8bfbf6010c7918a3f99b7fbd8a5929c878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-nashira-alphard-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d892e0621ffd010621c749e7224836ac446d06f96c997e37d0d3e3eb69033e4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-mutation-enif-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e28b1fde526e80106961c1bd090110c3ea00225817c67a83323d30157c811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-perseus-betelgeuse-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381da3a96c7e7b45a69ec174da49f251e1a0b300209a66f514d143c7960ad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-perseus-hermes-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bacb0d3293d40ff90d010115ce5b01cd474c2a6af9cfa35aca2abab004ae82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-farout-aquarius-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6481513bad4c7765f5cfbf7dd5138500e3e165cb7064776b23ada96b85c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-chai-heka-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-axios-vuetify-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07f3ccc278e62a86432c414a4fe672c642dea1baed087c337de30b545748280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-commitizen-ursa-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3f26d53b29b1bf3883da585fa2b4f95ac153556379e35b88240b0e694943de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-karma-zenobia-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da45a962f97ad133650bcdd4b4231419f4119828382cf6386f7dd71aaae79b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-hugo-markdown-pdf-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08adf1c75f567cd583cfb7d669a22e2738f99135d6c5403ab383e0c51a6389f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-loopback-ursa-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d635077354e4b6681fd7f7c304bac7987a4a3995a35a4d7339642ed6f74a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...