MAL-2025-151358 Malicious code in abina-amoavugoi-anunhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402c6f652a57d55f04f2ceba119e4065cccdeefebad7164329842196d6edd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161543 Malicious code in nabuf-otmbian-nuyafgidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7016022a4b6d6bf8634dc1db6f33d191c67bd9d35c1793eaaa345b41197b9ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153959 Malicious code in bufpani-muisyau-fanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3eee9c8a6ac2ea1bb5545cd39c577d413126c99bc948a000e3096d2f6e4a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164197 Malicious code in pilka-luniu-kan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0667a7b8231038a76f7d441e3ed542f5d3120266bc415f319ec57df9c03aa7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165877 Malicious code in shilang-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3121b1030817a9e12920e28a9a40644d0f9174d0e62c5bf58c8dc878240c69d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164172 Malicious code in pilka-lniu-kanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dd5dd30f2f91c409496481abce17a0c64aaefc118d6a2c84315c3fc58db411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165870 Malicious code in shilang-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df1a001eb8781d8a540c582a7ea6586e00632e62ab5d87942d48eb60c342ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-cosmiconfig-hugo-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4f594b558f1dd74bf1202360e9678c1faf4b03a2f37786fa8241c6674b6b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-geckodriver-thuban-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd589d310cc6a2712267379d31c495e64bbcd970dfdff92912d57032f89721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b8b360a5dadb05d9cbb10f9de323e7fde5d751877b4f12018344d078f414a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-prompts-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfc21902cbbe288d44e67e91822e196ee14eb461970003305eba5225b5ceffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-ganymede-meissa-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0c01666a92cdf3398dba5ae53b375ce14478ed631928b37880ba1eea55e208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142348 Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143683 Malicious code in install-rollup-spectron-webdriver-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b87a63773c1d18b14d52e160f293965fd63500d697a8e92f6a0d82c70e757c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141270 Malicious code in cross-env-sails-pino-pretty-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff472b53ca019f8b396f192549d6ea6ac94ddc96058c84452a9ba0390ae1bc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139244 Malicious code in aether-transform-capella-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70f2d60a13993377e528418f0db8de40d7aa55bf545f564a55617bf98ae6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145548 Malicious code in node-sass-mini-css-extract-plugin-spawn-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2940744429a3d05589b66affeedbda6ce1cd9484a8fcbf4e5eadc7dc1b2982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...