MAL-2025-162350 Malicious code in nokire-arhani38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652916d59af648b1276c4cc919546c75086f97a1f423095457a2861de3fa3547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170192 Malicious code in uyafru-tut-dautut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3a0e69504ca5e7b9adca41012c84f22b3255a65fa01c4425aa00a914ea6703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156327 Malicious code in inagi-vuma-nnag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc17822ce78cebb529721c1456d9ba1f878a5e1639e6dd8dfb35a79b92a9cdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-prompts-node-config-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9728734a942a533c415e6987fd3fa55102d80f96c4b586d9acd545f101f9cc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-fetch-event-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1ce1e12bcc903510a892579c99f0def360b8da6d761f716adfb0b174868f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-envconfig-auth0-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148519 Malicious code in terser-europa-start-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced4de0ee71fc50e0fe52a7db3d8cbdcfb0c89d08cd2479fc3b58c46de998c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-quito-betelgeuse-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8ce47e39a6fcb94ed9b5ea924b2b60ce702cb02686594e96bcc4d7a7a669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-javascript-achernar-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99885415d1f36f77e1881d4d381b6f8d4fb2e2a0edd684a8de5cb5464fc9ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-rocket-nightwatch-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c1a7ce21f97d1a465c17c98b1da1fb0548bcc5ac605c81f2286030ac4390e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-despina-apollo-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8378b5877907e04eadc11e82025babd84f62bc8d563fe6c2c0ff3d55c0cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-acamar-pino-pretty-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f910abe8927390314d9dd02154054f3ca7651d75fe2efdae6636290baecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-resolvers-helmet-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75ee7fb75d478c231be298854de00c4baf6a337165fdbe78ed46807ae66605f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-csrf-sync-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0c2f22baa42188e2631d684d1e40fb625c164578e44e42c3f580ecab9fe225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-bootstrap-auth0-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4dc39f57448875b8be8f6d2e20c57fea021b4e88fcacced609ad7670a9dbd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149892 Malicious code in zephyr-npm-farout-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f1ada7f740daf4ec82a6105cd6b46ced4f8385c45a41d911c90df80cba58d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145417 Malicious code in nextjs-iota-hercules-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645cceb630baacf494c208f488e2350a32af0532843877e7e691528a0e4a3949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147168 Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...