MAL-2025-143897 Malicious code in javascript-zenobia-procyon-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d17c7d8410a616312651adc3f3ef897cab68befc9d997b41d73c3f98dc7fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140104 Malicious code in bootstrap-fornax-test-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6adf60ba9bef1c75805ea586f8259b5b5ddb53f5837ecb17beec187d724952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140933 Malicious code in commitizen-jekyll-antares-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc26d4847edeaaac6173481b164fe0df5a90f1bb3a3ba1dda00ef38a4eaa118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-start-semantic-ui-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca2e2719f9edd696a7a5d29b1c059a7717eae9f96696261990915eb6e34e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-grunt-transport-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983442e552e785211f2494e7a99bd6132c23f905079524cf38ed39132e26167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-rest-elektra-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31685f1be57500276d60c7eefb51aac804f95d4aec096a79137159ca4ecd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-wasat-ceres-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78977fc84c2e7c36ed3f9a84b4d2226faeeb53aeda92309a9ebf36bcdb7a06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-andromeda-unuk-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48dc943ed0ce1b9e19332cb3d90fb3137fe2809f4fb3d3444a4714c8bebf4dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-slides-ursa-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165eb7dbf8e78106fd4075be2174b6f4e8ebe6cdaf5156a1fb27724449e856c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-redis-levels-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4808d63fabbd9b447cdda5786ef87da4c11c3ccfba1d820b6fa9165fdd0c9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-apollo-meteor-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954e6dd2917703b268c5246a18f67420778d3f628eaef1247fc2e40d7c5ebf0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-start-cressida-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ca4703dc3febe62df4f9224f16a6175999979d6c1e4ff155e28b2a5b32e3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-standard-octans-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce696e337acc344dbc20869ec37f18b2657aed732d85508686a22c668e34f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd303f21515f0dff1bfdece8ef5956735f37b53c0ae72f27c2547c01d44b88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-exec-readable-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fea43b9ddb5c8afe6a13da0830c99b7394d0a0b70da4e62db1deef40a77521a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142533 Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-odin-registry-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eddd33c9381e7922614632b9aefeba8762c030dff0d88ac0c3d0480b7b7506e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...