MAL-2025-146004 Malicious code in pavo-nightwatch-electron-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4dceed378716fcc9345a96d156b39cf00ed7d7f0067593d60376665be4ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144674 Malicious code in magellan-webdriverio-shelljs-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe19c56bd6f39887588286da4810ff134f86ff606f2b2f0b78472dfcdaacc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-cygnus-carpo-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee629ba11bfd815abe2fc73f81ae72e925c48c8b82660baf131e78b64586bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-public-version-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cc3b96a48c694acf88349bc3335188f0008975d6ce32521775b2876d3896a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-apollo-cypress-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ecddcbbf0f8099a1e391649b9d7c16f1ea8c65a436a1d4c333e454880358d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8084099cef506937c5e9d3511caaca023bfc949630af4a21c0c58b1b485586b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-backend-hermes-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05940c7f294c6b60ca9948a699c21c99f5ece74f5993de0fd374cd1fabcc5464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-webdriver-mocha-koa-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264d6148006e14acb388e5a9fa325a0f504bdb13ba6730af51dfd4004aabd832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-cassini-bellatrix-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd229f989d96ae7a463fc05e63b1f0c0148d0becf9594c760d8e6fc3045732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-sedna-charon-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de453de1c49e374ebf44715c50ac02904e4677909382b3ce27270d01c5ca8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-centaurus-meteor-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e2a7081640c6d00cd3721b0816361c409eb82efad2b5cdab73e585d1ee971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-virgo-electron-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e004185e6eb62e9c0a652221cda1897c258c819d0e8dc5ba761875333b52b61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-chalk-rigel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-config-galaxy-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d30c0834fdaee0ff43c99bf45f9f78794941b1749f3d4db0fbf979b8c56fe6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-husky-blaze-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ed5a2f08116d37357f8074fb85d6e54dda19d5bef3ebb37179a4ab84fb0733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-enceladus-lint-staged-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae1829f498555d59bca2416201d75d19048908b4c7785ebcd0735c275c15140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...