MAL-2025-158073 Malicious code in layla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572962e3913f9fc3bc847556450a813fa9084283d047a31458c3242aeba2bbf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-uyud-vamunnin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 010c3045a2f459623fc2477066dbf6178c43c8cf7ace6c04056d17031685fbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-geckodriver-less-loader-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e7ffe9e4024063c41783a941e17513fc2266685fa86e77704cddf053a63167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142403 Malicious code in farout-chromedriver-aurora-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b98547be9e19d5bc0cfb5d20c3f5dcd85c8c38d403eb7042af8d27946d36a4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147570 Malicious code in sadr-orbit-publish-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a8270fc0017313bc154b75a1fb4da0c00fc8f3d414844927e0012cdd7741f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146123 Malicious code in perseus-vega-leda-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeffe04cae6de02e05a62a3739a301bfa80d5c4d4353e8d1674a2144edc320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141063 Malicious code in configstore-rollup-nconf-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b379eadc5701a4e95b8bc8f0981f9a92a62039f671a5531e6e5821e61350d4ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149806 Malicious code in yildun-antares-mui-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b10b5e93a26dbeeca2443fc906e35cd7a1c3d3a6f0ebfe158c9a50ca3ad24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145172 Malicious code in morgan-dione-dactyl-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95000699eca91b0ededd51164715e83893012ebc80da1d3d2bd604416d49e9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141206 Malicious code in cosmos-eslint-transform-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7479fb17e9a5219733e5a679b2a6f500dc2f60d0358935e1b79955c8c2c8c2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142352 Malicious code in exec-mocha-pipe-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98eab42201e22336dea2c31ea0ea8cc9c09882c65535f3ee18ea10f719c32e8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144393 Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142253 Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145868 Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143292 Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...