MAL-2025-153455 Malicious code in avminsah-afbiafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0cffc135d86fe3835cb68d431b7db37f6ccfddaf2628ed6a91c1a6e80eb7dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160644 Malicious code in modirai-igimafo-jagagigg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d485373c07bb8e8b2d13ed06acb20a40f9127f8578d1840f1b54760dd2555fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162716 Malicious code in nokire-kore29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7498c2049146dc0841650aa7ec80f2366d960ee8a2d39a650939ce1b970b8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-orbit-ophiuchus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95be8eae3b5267ee3a554f7dc53d936cfd1414b402055900c1bc3a8c763e49dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141448 Malicious code in dactyl-native-superagent-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9399d903b38766a58790ac43991a2e3704dcf083ce309f85ffdf08a9046286c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143128 Malicious code in halley-alphard-process-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fd87a0b41ed17c1e8aeab77b69a49d174d403a417552c2b91afa0568e48d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148206 Malicious code in spinner-playwright-geckodriver-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3609f32708b02f5163fb276f5c7fda98c95d96783b4fc183c215da71bb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143079 Malicious code in grunt-xml-mira-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147705 Malicious code in scorpius-chariklo-nextjs-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3accdb3220250ef79e197b795a03b196b4c924a07d04d83687cce7a3762d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f38df4dd9bcd623e077041fd6fe4147a12433ae157325ae3cc9a4cb9908c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-slides-event-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ea016128f3a3773671f5032bda5869a87bfa65d6609d9ef5f19160d22298b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149058 Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140800 Malicious code in cli-gemini-kastra-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6605dccf94532fcc02386fca1e6f9054b5291a3e909cb1a0504204ee8be4880f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-aldebaran-hexo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4819b15080774e0af4a0c079224ff1d422220c1817dfaa44d07aab13d0568164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...