MAL-2025-153738 Malicious code in billa-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27545c6a6fc3b96562e884e665bc94d2f6faf3c1b4791598a633bbfbe704a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152572 Malicious code in alvito-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db63b4807ad47d651bccf2aef8f5210692aa61a1ddb428b857966383e2f57c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152236 Malicious code in alfiansyah-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d26a8f3be97a3844258c11570e57ee6a46100d063fad31528d767f2597cf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/tifjfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507963ab6ec770480c0aaff477f59c6f3b39ec7c0fe33f3e8ac2d7b82357799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154504 Malicious code in diago-kulp-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83615afe0940f9a74512123d12b3cf404c93228b352379d15990fe2275ba3295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163408 Malicious code in nokire-sekiya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd42a07524186ab4fc543ff24226ae7065fd279c4577ac72ae79a7959dcee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155055 Malicious code in fauzi-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc35e0685718a9c9bf563babd07819a0f2380037e21812480f4357f080aaec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156063 Malicious code in icha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e32cb2e4609d72a2fa5769c4ae8d06bd7ef427149382e09acabd87cbfeab9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-deneb-lyra-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d12ee9ff99eacf328cdcd425a35bd5f6511ae844d95df269fd45b8a33b65be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-perseus-hugo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cec9ecfdfb8a0c2c57e573bfa90f86c4ed7013b554937e53b33494174a0e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-zenobia-hugo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9c0bbfdb2f4db105e962a12099bc5ed6eacdad8927eaeb93adf91598749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149111 Malicious code in venus-express-lynx-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8cf852ce1290b0d658feac972c9ad5e20e74bc2a89903c85978cb1c5797c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147139 Malicious code in regulus-apex-package-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59a05a19349911216fdb272750a19dba669a24491c9ff6994f3988897384906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-deneb-umbra-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97473185bef024c93924990cbe14eeae502c2bf156a233ff17b916ea9c0aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122834

Malicious code in readable-pino-loop-nightwatch npm...

Malicious code in kaus-dorado-hyperion-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-scripts-callisto-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65067c64696414d0b4da2d866416a0e37392a25616c759a9d4a8d485e05a5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...