MAL-2025-144604 Malicious code in lyra-buffer-sirius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52588d74bb90999914f87139a9d767c0c09748794ac5b8677d02a3e90b2a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148756 Malicious code in tool-terser-avior-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e7250d997601bf9650f92fb361f0b19215ebb038518c5ff63a958a9eb4dca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149055 Malicious code in ursa-electron-builder-helmet-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69dab14f9c372453cd1539810554a152dbae1521576f8135bd17dbf90b01ab50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139765 Malicious code in avior-dependencies-radiant-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a39db691166389af7eb41e33b34e652b4a60d102ea2c9b17977299e7f021f730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139409 Malicious code in antares-forever-eleventy-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1176b13fe05a33c670c5065abbc172457e68eabe3127f0c4345eb74dfe4db208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148200 Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144642 Malicious code in magellan-jupiter-jupiter-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5465d37e629fd147f904430a0ecbe14bd1ac0e835f9c833515fdc170327c89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144308 Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold-azure-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cd52b0166de72ca40e67be1e05b988770cd6030acc466099657a5a05dd5f05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-bronze-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef9e82aae009594b04b907205f72f7f67bdd69d69937a6724d0c0b84ce246ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid-maroon-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229582b5999f79aa7d666c6749ae9c69842cbe99816541e3596a10f1c3da3e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prepared-beige-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a7795dec554714ee6d12138c4b61dc1eedb909e572d48fa3de60066f609362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted-maroon-reindeer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25b1d74b0fe2abbb639904a901d5664905bbf7a4f235ae76bf26e9e90272641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy-red-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136a6c89f41ffb43e3480e9e135af5adb06770bf847e4378bda22bebd5a66d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-turquoise-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b937be270c79253db89f470f116f0c0e4e74708349b3993b81719979afc47da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139104 Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...