MAL-2025-155378 Malicious code in guras-asia-thai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60190b628dcfcf72fd62afbcafa8ffd4cf81aabfbb1791fd3bdcc2626d700fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170522 Malicious code in verify-ticul-bisusnyaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b81009900d49ccd39efe9d1c012b63b952d75b93ccd4a5f8a1114ca3017f4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155684 Malicious code in hariyono-76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01aff161593a439ca24efcbf27ffe689f65ad767b5c45c71ec5eab18b287dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153769 Malicious code in bintang-tea21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3fbe6eb3802015337084587adde601377bda62423ba69beb4f0fb100d4120c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169975 Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-standard-miranda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d3c30a51abc91b12f482bb8456a6a71fc95345ed667f032cfef13cf02b6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-epimetheus-selenium-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be603a6ccdba311fa78ba451f8072a751787808a917f9b9d7795778a7aac3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-gulp-bellatrix-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6373b65f6de2f3650a7c758c470a6c57c3364116da0f1ed56b7c095fbcdc50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-phoebe-meissa-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfc3ea1ff019850090bbd63cd756abc2536600f47a0f4c7286e87765eeb204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-playwright-eris-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd3b156740f71ff872f80c4d30cc69d2d1787e5ed6674ad7a025f35dc0f037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-xml-kastra-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-eslint-pavo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d5177b0597023c87477f7e642b8c1decf833335903750003c50a01975616f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-venus-restart-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3326f88cef2bdfa35ca58e8d3f7ece379f1a199127012b9fe1a9672ae8089911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...