MAL-2025-150041 Malicious code in @mipta1/guyk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c3ee0d418f7af2f867e220591ee77d064cc06d6e1f08a10289d4f690d209f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkui-kgnuuanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b52df066757a96d407fd12f962fcbe4475f78a16d559dff0232a753a66f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153138 Malicious code in avminah-fagimdas-dafogafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af590a3963d5606e24903cc9e4c1cb5fbcb8f22cbd8923a5bfc74eca95ff5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164665 Malicious code in rino-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07efbad554bbee7cb8966118c993a5b20a073613f42488b60631a32f2d7c79e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148411 Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149902 Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-sedna-postgres-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de4ae7421221c3621bd1f9259173e3856dad4eb9b6e93a829e7fc51a103390dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cac21b59d57f39403b3152a77369e8dc1a301daf2eac4c4931b9a68807b037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-arcturus-auriga-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-adonis-draco-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f98bec85b5fc4e33b7bfac2687c0cf98d9b8227cdb2d94523ed5fcccb2162d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-release-it-halley-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-commitlint-config-angular-fetch-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02b4b6a63c278ba031ef0f782682f26c1ad3881ed1ae82f7aed8dd2ad04e399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-dagda-electron-builder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432e6d6f4732176d1bb27e4248a3a9d354d57b424590358f70ac658dd3b40a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-vuepress-colors-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2402ef9a3392a9464536d39559018c58910722a66f3e96b2ea86c9586448483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-achernar-betelgeuse-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4877db2ed8b3a12adcd2fcfb33130f202ce33e00f7138d0c8016693af1e6256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06f2eec608e17c83e990fe681b4c5261e230d77ce9cac37d95422b793606bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-webdriver-mocha-ganymede-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9ebe0367f6386af7a0bc4b075a8402500ee6371eeb019f4f8307ab271e7fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-gemini-carpo-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0308cc840d6e4842e9c4e15e00d84558baf9204aa281f3c76b3e21112fff0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00bac4b9d3bf434baf33475c1ffc2c91e619ca223df411a0ba2579dedd4f6c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...