MAL-2025-153444 Malicious code in avminh-afogofaafi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a8176fbbce93fd29309037e28d77450d63d8aefed606c17c872be03eba598b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167222 Malicious code in teagood-nakama56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89093b338330b810d43702eee758b39fc2239170f60fbf3eef4b52f3cc685365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154506 Malicious code in diago-kulpo-kai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998e5917bbc84c630710848c8cd66519d29fc2104f523c41bb35a501fc27375f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159405 Malicious code in manadsi-sdada-midadar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a9eaa99b2188b2808cf7417846a82ee33db3bd4379458851d8f5193629278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151330 Malicious code in abih-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e72cbb08662af8222acff51ffc38c2df0124e6bc7bd24daf26ceba7e47a724a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150234 Malicious code in @mipta1/seasswsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6c2b26da960fdcee63dbc3e8d7f210289488c93ddc0335404c9c146f19c6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-postgres-update-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb35799007a0e25cd3e23775b02f1bc4fbd2fa565e5913bfe2f55d4648555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-axios-babel-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af51a505a4a19960c6c4d61b29c39bdf29636e1200426e6fc09a4c81cb7a186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47665784ad522eb04cacf6b2f03e8ae0ac57786dd4012aa6cff0c9b286a13ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-octans-airbnb-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52c4b48266ddbc2d30e438b7ca57c0588832e7159519b162bf2f752252aa7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-xerxes-eslint-config-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3801a510539aee9edbf5ed5b7220556f1c49cf3988e80a0f59c6254164f41d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-nuxtjs-upgrade-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a1667e019874b43abb7713d4776387e56a594b698432319c188f692097c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-spinner-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e98cd0affb029888ab835e51cbcae72cececc82a87445c1f0b863fccc699077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-electron-builder-eslint-plugin-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7456305cc58ebdceba37e7f3ac074cb977be82975180ce9e478f8c7d20a17f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-quantum-gemini-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b23ce53acc96ba7696a17390f3443dd9d989aaf078d6e6315d2fb91f08473e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5df92a7b90329406eecee7a3a400b2d62ce2844e17349a089b79a8fe5428888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-mdx-barnard-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e936f8272f0b58889aeda20875ae5a6f79498e3a9da9280a2fb5b686cb6e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-bellatrix-postcss-loader-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f58a61a1c9e7b168034026bd7f3fbc855466854bd12522712eb602f4b62e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...