MAL-2025-168947 Malicious code in tehah-bautaf-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36d33615aad1f546d741c514c410a50981bdbed9ec451623c9788ef40e838a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164068 Malicious code in parwo-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0556e9f24244c3456213908a3c03c2d68b212d54cd850259a4b8e49e6582595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164571 Malicious code in putri-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f0a88b5414c80e70f59d1818405bf5cf785d6208094f3809062938be1d272e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155908 Malicious code in ican-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdba4ea815d93ef59ce238102563d0f061f496c706a1691dca59eb206c49c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168228 Malicious code in tealove-dana22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea47f5ae83e894e9f9c0c9ebbe59b8edfac60498de179b2aa0b5fd1891daad0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151511 Malicious code in abiuna-mobile-amam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a11e6b216fb87df69c1457745e676d265fd62ff4da83c2f43c9c9c2f3f8201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145300 Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-blitz-nightmare-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d5936815c3f7fc7fa7cf85c4097e6689d8d83126c8007b5f525d2c2e31530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149365 Malicious code in webdriverio-dactyl-node-sass-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82883c4820c0624706b644e21797994f6a8e2cd33da1ec89e6da0d2cded544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143978 Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144648 Malicious code in magellan-meissa-oauth-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4147b208943baf94596cf907bc52cb7fb8253b2b9fbb50010a1dc78ab9237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...