MAL-2025-164966 Malicious code in rita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3c207a427bb98d36a2d424248c171cbf74621773fcf0e014a7bd89543e7af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cfdf38deae25bfce21b6fd71d26e44b516c3468190c10cb15a824974fc70d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88464fc7d0eaddf6246e4bac750313f2d68736883e6145a069f3e621a8a1459f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151993 Malicious code in aibuna-mobiuple-amzaeiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14928da7a74a126c62e739fe5ac38f15d31ed92afe38671b7afaa3bb9a0d296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f894c4184a62b44e74f2695274aaa71dca07dd6f56d0e42592e51b8bfc8b2b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169277 Malicious code in trevora-cir79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb973e29124f14aa0e962fe58b63f36d29731b6e1c15e75e3e4ba1de84ebe5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156783 Malicious code in iomodra-foruai-uajai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145d53c9c1ea1ae4fe858e024b2246b307a20db2cc0abbbf6712eb472e7b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161931 Malicious code in nasrul-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac05d83a3b9ad1f0c693edfd10598b4aa50289c17629164a446a8ccbc6c5a70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167810 Malicious code in teagood-sukuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6c2a99c241c1393044c53d5ff87d7443239acbd3411fa4e2710085514a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159973 Malicious code in manttu-rolsae-nutady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fe7a35079cc9a59f6d7b2e9cfcda0194698f00c717d1f76e14b4b1a222616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147539 Malicious code in run-script-bulma-jupiter-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616dbb1bd56cb2d5f22936162eb14cfa2d9fd391f8e8f257f39b6f3cf913ec59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-alphard-zenobia-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8e9a7165f5f93e0d2ea4f71fdcc15e596029699a897d1418f935127cda681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-start-link-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f11757735a5d98d1eb0e745a37506fbce530b534d155ea6fedf6397a676c837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141381 Malicious code in cygnus-stream-lyra-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91d6ed1a45350dc66c59200a558dfd1805694304dfb26a4721875c058d4b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...