MAL-2025-162424 Malicious code in nokire-arjuna14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40b70ca6a3624bf1869f1827e29e30ced26af935dc446c79e7f59c5379d6d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158383 Malicious code in lookingan-nakomi25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733515eb6b4d9adeb43540c53723f2acb96cce913f8fc44db6f2d3ef216c154d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157450 Malicious code in kapvfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939870ef53079c5712b946bb394d0002e931d1fd721cc61b0c995ed3af707524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169547 Malicious code in uaragifa-mar-safufat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbc1ddef80b9e183ac6564cadc9eb4259fc7ea0d5e960e67bcb11d4616ae1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150598 Malicious code in @miptaa02/ewias (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a60cdeb026fe07f6c79c157649ac670247c4b3ba010aa610b4c931018319c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155435 Malicious code in guras-nutra-dgds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc9b8e7b990debad532235622df4fe7718c77a0b50bdd333685a6ea82ea71c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-pavo-hexo-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d77c16cfe035d1cc74ef7053e6225e19ecdf37cd246eb80bf80ddb645f4ecc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141950 Malicious code in elektra-mensa-astro-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1b808128b662930b7d3ba8de884fea5792a6ea694168add9c96af03ff99ff98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-andromeda-less-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756e1e5dec54aa1aff257fdcd777d65f86e0a6df55149226949ec83b609f32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-stop-castor-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa35354472c2f2678fa95177ad7e7c4f6e5ec0a0e678aa6a6919e56870b0ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124fae100d834ecd38af354ea48768894dc6d768b217b345c0026ce633a24f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147266 Malicious code in repository-global-commitlint-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e439146265fc847c2ba6635b34bdf04eab81a50a6bb7b732c0b65b4b98dd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149508 Malicious code in winston-miranda-deimos-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6de0c14198fd929f6f9dd0fa13157940276fbe6fcb62c9dce5cb2a9209c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144167 Malicious code in kinetic-delphinus-farout-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f370a395c2d47ea909b67d7db2433dbcdc997442f2a384b050ea0c2e241a773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stop-query-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333c2e6a26a046e467d6256e8183f02eab4cd2f94d15be31633cbf99abc6db9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139656 Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149137 Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138909 Malicious code in old-bronze-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84f992a7c167603557b99a2d242d25449585b6f3a6eefd7d368f60a93ed729c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...