MAL-2025-145371 Malicious code in neptune-passport-venus-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b79af312699923fb557ac1f93a7acb0b38786ee080279ce5cb81d33f1d1e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144475 Malicious code in lint-winston-browserify-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f6d475b0ea7203ceb3c07f5ffa5db59ffbef110b3585646afc0d02eb097dd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141894 Malicious code in electron-bellatrix-foundation-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ef845444cb41e42b4cec717cd866a04c8cd25e7b5c993699ac5f03bb16fbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-cache-andromeda-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a69f1e0e67e5d014f4810d287a413d9c3f360df647b2978a8a65cd71af5f0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-apollo-spectron-webdriver-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d734ee8393ddd4f3ccab4d05b46d4a8085efb891d8ee9e67bc44443567abaff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-eclipse-websockets-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e5431a759d39a0e0c0617d7467bc86541b6958fb8d0453e08ae6eccc56a3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-aquarius-prompts-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6206ff487ec40eb65e8f7173869d22aa14bac87e0735273ccf10c371304274ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-indus-atlas-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe29767c5b6d5ab886cefe4d1c91bde80862347523e6d222ef5f2302785b50af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-jabbah-inquirer-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c23f115a9c2230624fa6f80276eacf194a28e0e56c5b3d3a789f1e944714c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-chakra-ui-css-loader-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e569838e764acfb421a87734a9bce1aadf35ce79e570ec2f763d256404265852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-spectron-webdriver-nconf-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0fe45a7b9ee67b12ce68386241af989b4f9c8e068b0353797bc22300d63894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-cordelia-xerxes-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b67b0a11a65e6ab402390b6bb142f74647371dc0d7415f991c7eba4fb8d444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-delphinus-typeorm-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4156dbe424c31b0b557485d7425baa456b1b7b461c9d9db75319dda86b377161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-algol-bootstrap-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68d8995c9c42312c48cd62a77f4d227f3731c914eb2f4a8676d20e2cebcce69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-publish-markdown-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6c37dc5bc5d8fcb554dbf6f064affdc92e9b34a5aeca6ceebbeee20d52be0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-meteor-mocha-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9699c8ecd92c1240dc7e25526a80075be5719ff985bf60dafafc2ecb9a7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-install-radiant-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c3db67dc50d23af922b8b66d3017fe1f3bb7845987f6c590cf7c7b42b827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...