MAL-2025-139191 Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-sedna-postgres-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4ae7421221c3621bd1f9259173e3856dad4eb9b6e93a829e7fc51a103390dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-chalk-browserify-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b4135ccaa60e37d9c574a7f14ef998a716328721b7261309164bfd5c329e6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146791 Malicious code in publish-karma-ora-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e61492f607b131464a50e46955f975b174ad6ba550ef711b084bae657885117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146476 Malicious code in prettier-plugin-markdown-auth0-firebase-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d20ea5f8451b4e7873581d84782fcd1bd8d4215b0440c2e223c82b0e0c65f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142338 Malicious code in exec-enceladus-axios-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a062249bd440e99eeca3811d7f3872670382d064a5d70f13ec64a7bb23b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149747 Malicious code in xo-dione-sedna-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2ecae7d1b3223e720f1f67a623101f7645bbf0563fa8e4a75328b195b68191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f62e5f49571a9bcf03399533c3179b358e0738040bb42e0779678e2c4947c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale-ivory-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0842ec1c31403be2c9b18ed3cf0c753346837220b3bb8da64b35ee217333cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca32dd51b46ba73c6074ac085243193562b7af07eca152a0375c42a229ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efcc0f1de88592b65577ec5b55c94906c912e7d33987c7e1317e84788125adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138946 Malicious code in prominent-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c86b8cd91a495289e4841a1988fedced34e88bec52dd84e0987e332faa9f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-taiwan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2ee6f620ce6a6d7977057fe5aa8e1db005c580a492d2b17783e298a5c51f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68893e28a1a71a76c70c26046a652421378466b122c161effa6a17d72cb1acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jamblang25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e48f5ede2efa89165b82c3da276021673ef5e2ff379341f2f76f41d2fbc4c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kupang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d34d8f06422be926ae1fdb0b112189c62a77e24baaed24e87db01cdbba8d8949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...