MAL-2025-146383 Malicious code in postcss-charon-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef6d8dafaa116a5ca64bdb2c40c47a42b8d292a31ce2ea6825553b57b0690c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145347 Malicious code in nebula-meissa-shelljs-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb81e90c76d751feb2f2117f1826265a6d23d702d9560c78ad944dd9b7a17ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143835 Malicious code in janus-sirius-nashira-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9a413016e30e6e0c4bfd6ba48a24fee36358f5ca19be2716820031424ea375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140300 Malicious code in callback-levels-cz-conventional-changelog-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f7ffaf5df406c08f6fecc779f7711712a13207fcefc1f71ac2fa2f9a3eaf1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-iota-protractor-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df350d081c57b71749f2c728f47c73a9d2b08448b1ac30cd02ee910c3ebb0e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-grunt-lynx-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1ba9d3e7d79a9d0026ece280516128249ccf96c91cdb61c89adc5bf8d80487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-zenobia-passport-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca8c97cb6ac0779080fceb9527f7442614f57c2e63e5ddc7208cc5d617a013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sirius-fornax-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e66b6d4c4a782bd1811563df45256c74e75c5d248ade83ce2ab284396724d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-antares-rehype-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f4046d6c01db6709f2ceda4dfa721a7019ccbdf0f7fdeab32c751a236d0cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-auth-redis-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85555441a0c2d79b1d1b1969076ac3264555cefa255a2a16d975c6127b68c535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-husky-playwright-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703658341f715087b73ba01e8a5b24bc978d02ab5a6bdffc1be2bf4a51a17df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-mui-fomalhaut-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f736890bb161d7829091a44884c79fc095594c2c5cf79d556a77560a690d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-ultra-ceres-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776689ae45d74b271ed19b9bff9e67824bd653c6eb8a6ffe860fe7b8fa4dbc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-native-jsonp-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721529421aaeef8accb9c675072bf8c91146dda70fecc5f4ea3d58ee3727c41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-cosmos-corvus-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5961e08b1259c5067fc211c2ece991e06ef9c450f1a548dacba833649f023b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-vuepress-slides-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d3349dbf2aa8e6026d62f70d94138d5d47c305bdbdb57b61d4923f1ccd53d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-meteor-element-ui-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b07d08f7bd181bf65426ca17d197be99b4431f0b0e6855e93f84eadb534b053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-sedna-reveal-md-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f033be6c88dcdff6f6ff0908652951a9f0c7c62e2de7626708ef9fbc65f8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-vega-electron-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040d240576965aed13ed11371c55ee7e2365e2d115a89b45043d3337d7d15156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...