MAL-2025-151730 Malicious code in aciyua-idugaat-dafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea4044bcffd4d44116f30e4b8302e80ce589084e68084c14c0dd1d9a300ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151384 Malicious code in abina-amugi-anupmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c299efbf53ef4b6c53c41c9e4738326f3c37055ec52416165d3fe8399fad5647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163951 Malicious code in pajero-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15bf35ea4250c9b14703cd73e8ac3d27e9f4e16ebac324b192586d94a94e0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155364 Malicious code in guras-asia-ba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5294e2dc00136de019b5cf2715baec3828307c4d8dc114c3070df97a2bce188a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145218 Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f527d979b805966a29c97a0f6ba24c8df77bbdf6e19633f45420bca5790374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a451c521b719214daab4309206ebefc8786247beebe36e90572871635519afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-kastra-webpack-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da31a94dea166f9732544d8bc74d15fb23b8b8d49f3dcd8465de86a7b8ba7022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-flare-karma-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ecd3f80227f98c1d0462c968014d6de029b6da6be6262f1068d0597315dce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-antares-avior-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617d6e5eff2b19a1a89297c4b75094e3aa4bde467ac80950ff66e9485eabcae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-nebula-sass-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3575dab522d0a71cd76a11b1ffb22109fe401d11239b6d29d146aa34faaf0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-sedna-rest-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd8d5a7d225f8bcf97b5fbc42898687fda8150484ad69294c8d1fbdc15d1347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...