MAL-2025-144914 Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140929 Malicious code in commitizen-dotenv-safe-tool-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a398c58fa355d8d568dce0775167b9257cb7d5de6497c9866d0ff2b45e2259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142509 Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-winston-taurus-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cda3d47eb443e153b268e3cd84bec534376aa447abc556d9b1fc2afb49c208e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-node-config-less-loader-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23bad10256371cae16d24ae91e4e32c12a54dc530bfa4561758bb271d7f2bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-cosmiconfig-sass-loader-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a3d3ea8d49e0103a6025980fe2ddbe0f3fc5fbfff21c014343f67002004afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-figures-package-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-barnard-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ffafd3b6e043d42bfa7dbb3f79f69ac43015f66786a1e96366df41603d8f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-dotenv-safe-pulsar-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57ac59c92fe865c160f36092ece507eedfe2118c474e2d7caeb74e7f1b13356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-hermes-jsonp-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3608e2c39c794c9d92a08b2aa5723896c9f48f4e929c74156c60e7d1a567b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-scripts-spectron-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9cfa26e68fa75cc0c35312268dac3ccb76a967ba3fc4234c6b2d2affd6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-umbra-got-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc596c49c4ad9d9d07157ff4fa1b8000bbe0213ee0fbf7f7bdfa6f7b8f7b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-comet-dotenv-safe-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba749e3d74862f13eaabb12c70193eeac434a7647c0bae4281bc4536eaacc4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-blitz-nestjs-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616d1f18d44df442a0d86e3b0b3818a450265f6527b0f215fa5517c7ecb24ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-uglify-js-nextjs-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6948ab4c43a4459026e7fab984c2823c9512f7a3204cc4437e5d1a651020ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-blaze-ganymede-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c36548131bc59eca950e04d1b40f3421ac426a7189a8aa205124a8688d65eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-bootes-postcss-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0946cdea14d211a37908ae44081e7d4160b2eb486139d669e4b767981335152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-npm-jovian-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f65ea012b56fdb0899a5fb284cea38652774f3b6d719c7ce1900fc6e8cf1733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180a72d45bdbb58b46fcc6d479cd540e67555ef1d4de1fed03fcef981d97533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...