MAL-2025-154590 Malicious code in dian-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7da3f7d4aa8470e56015d42d56f14c7dcf1d28532ba2866a30464beeb40d85b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153444 Malicious code in avminh-afogofaafi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a8176fbbce93fd29309037e28d77450d63d8aefed606c17c872be03eba598b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154683 Malicious code in dioago-kamo-alauliah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dfb6de57cf394a5237aaea0f65fb9d57a9d3f62aa41b6d7e738c51ecc0fcb5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169776 Malicious code in uinsnu-lotipmi-kilr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384d7f7f57593cf8839a1384b0e6ac1d33abe8a035356bef642fb0aad5f7efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156808 Malicious code in iomodra-fuoa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef930aea972f4e6082d151f878af67e7699d58958de4e0cce2ae6609a51935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-development-meissa-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0cce58ca27bcbee4953b748ac079795ae9012a13e66e88460614385e7f92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5df92a7b90329406eecee7a3a400b2d62ce2844e17349a089b79a8fe5428888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-octans-airbnb-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52c4b48266ddbc2d30e438b7ca57c0588832e7159519b162bf2f752252aa7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3801a510539aee9edbf5ed5b7220556f1c49cf3988e80a0f59c6254164f41d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-axios-babel-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af51a505a4a19960c6c4d61b29c39bdf29636e1200426e6fc09a4c81cb7a186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-nuxtjs-upgrade-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a1667e019874b43abb7713d4776387e56a594b698432319c188f692097c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-mdx-barnard-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e936f8272f0b58889aeda20875ae5a6f79498e3a9da9280a2fb5b686cb6e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-electron-builder-eslint-plugin-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7456305cc58ebdceba37e7f3ac074cb977be82975180ce9e478f8c7d20a17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-postgres-update-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb35799007a0e25cd3e23775b02f1bc4fbd2fa565e5913bfe2f55d4648555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-ora-relay-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b21441c8f78c5afc7820cf0a2d79eb3499fa1781bc2b779d68a7a46288bf644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140418 Malicious code in carina-odin-loopback-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9a886bb982839ebda50269955d0bf11faafd1668c2f4578ee66d69641b062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...