MAL-2025-154530 Malicious code in dian-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a75c83c3612973dccefb90c21e944de2cc43e6c5a4453eaf38107ab3d35b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162966 Malicious code in nokire-nakala15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5332ff07b578d1ff7f085deab43ccb611154013f78a1cf0b545de0c9bf6fceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162298 Malicious code in nokire-akaza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6db1ae1766f210273558146c34626504802cff844501ec740208bcd07d724da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154617 Malicious code in dian-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe512300841e9d0a5fd82b9fe0164e6f71da2ffc75a665d4da920ecd1e5fa93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159792 Malicious code in mansila-tfla-magazgoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95a08fbc3039a499c16ed55d175282f1181d626b69859b7667a7291b46b598f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-hermes-octans-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bd65c2d4862529c0b647b1f47ae5a455dd8490b38d4c68c7a3f582961826e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-norma-lyra-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9e34bcf1e3c5b6e4923008129abe4146826a6a6147d34d768d2ea843dd9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-alphard-sirius-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c805155bc8b2e40df017e26f58e664de20bad1b1e5ff36ae71477544f82c9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89d2ffb05d55a0e18788627ae122ac61c109c866161976ca540df6e5ea69458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-kinetic-comet-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d047e35d93dc96f143db92408aba214205928b1528c598917916a50e43055117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-mui-server-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cbab30830c258d4279b46b8e5d3cde0723f00724a5e0e18c073551ed2ec03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143304 Malicious code in hermes-castor-pm2-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa722926a8ae60af349b17ff1872860d4391506d2992ccf36b8508a23791cb53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...