MAL-2025-145816 Malicious code in ophiuchus-got-perseus-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db03ad94a523479b2eff4c7204a7b1a786f887f15f2a953ae986b77d962c4be4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144515 Malicious code in loglevel-mensa-pegasus-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2afc3e2aee8b3966ed7531a5d556897d37bc1bdf1d7ad73a0850368bc5bc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148966 Malicious code in uninstall-protractor-xerxes-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f16611934cb89c67029cb786d19c2720a0fa882fd86d57d452e719c9181005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143729 Malicious code in iota-jasmine-ini-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 246a6e5b17ab1e16638d1a3543233fae486f2cc03d2ad87def66745911ca17c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f19ad3942aa64e870b1cda93f1d3230e067423845a5b4c5d84fbd34acaa64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-gridsome-backend-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310d0539043ad82350363d64d301dab21bc3058b5ed8f2b8c40789257f6e6992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-cressida-callback-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c77ef0113fc08e0a50e8478f17c2181fa693d186f69010fad57b5fb1a431e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-writable-farout-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92cfdd8e9ba325f1984bdf4531e1434e357d88a197cb1fa814f03eb07ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-farout-xanthus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3c95c10dd0ef23dee9c5b68f961b0d2ae11c9bb1a7180844f016acbc486a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-regulus-xo-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0ecd50ac91c36ba79eb6075ee122df6de1bf11f6408f38cf8f4a85d017fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaphahitqq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c22bfac3a31bf85f77f63ac2d1004c7779f42692ccc4b5f0f31474282377192d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-hermes-phoebe-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a388587bd7e5fbaee3160b85a520b4d51f8167dee7b9713177988156d1ad40ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-algol-cli-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba74dd1ed1fa86b1e45b96f7225f5be8ef4b2a24606e0c856dada5cd3926b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-algol-perseus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77664b9a0fb1e6506cf3e5b1505a16bda73fbef3380e9fa57914417417763e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-aether-mensa-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045aac20a790e741d9cbefb0f063d5632d3512ec278156db660664363f032c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-warp-foundation-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2da07786b07f1080bf68eef9f1d567aa7e1c425ad990827531418dbb2973611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...