MAL-2025-168242 Malicious code in tealove-dana35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d3d7b9b7aa66bc6bf84fd4a33b8e362274e9709a382b42a267c09428ccfae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153859 Malicious code in bitha-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ac2bdcf1adafa472c3bf3ec6fbf8c5faffcbfaad26de60c377f970898a76b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158324 Malicious code in lookingan-konami61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdecef845b656dce31ad22ca6297f8aa870da86939d5850a375efbdccd205ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151115 Malicious code in abeh-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3678365b23d2515c119b98f4b290b78a88f21c085a76dee373e5338475f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157214 Malicious code in jurss-zas-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ad4b4532e8209c5dd66b3e61fe262662f87c83e11cc1df266553c001ed35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168239 Malicious code in tealove-dana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b880f64ac3a0fc6f52ad59e9535f724ce67c13d99f7b2ce83b6ea8c8e82dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-leda-algol-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fbc3669df0d35be47cbe0140850a63481a6f1f7446b8c464a7b5b0cad5508b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-hydra-weywot-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f121b1962f33f6f178f0b9f8dc9bee590afdb80f5fcc6e4a087f70a9f74232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-bellatrix-global-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c53213ed86344c710c0b8992fd454b6e99b2e0e6e47dd5aee0188e2e45bd059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-terser-yonder-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3d1ff5ace7d12bc9322ce74cb70df5f4688a3eab7f4e7b50e4591f92e40a62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-apollo-transform-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db4084e821d24264fb92353f0cffb2bb312a7254a0f0a8069c3ffa278f517e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bc6f143e9582b48754cf9d7909df4b782c45d7c78a1fd54b06833089bb3c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140707 Malicious code in chariklo-private-phoebe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf258b2fe854550f13fbc74482017621aaf80f8bd14c7920dddaaba3a1cf2e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140730 Malicious code in charon-polaris-socketio-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765198641ce1b82606fdd938edd1346719d47b28422f609f5126548b170496d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144401 Malicious code in link-bootes-framework-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6c563df6fe1722782e28266c6ef475dcd31541163f0920d045c902f8a088c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148506 Malicious code in telesto-wezen-mira-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146742 Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-proxima-norma-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41f1435c6ff772f6d45f5d824fd1e24986248756b51185f6ec68060a126947c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149855 Malicious code in zenith-mutation-enif-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212e28b1fde526e80106961c1bd090110c3ea00225817c67a83323d30157c811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...