MAL-2025-152678 Malicious code in angin-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ad9bcc7b8997b5ada30e2534f9d0d8b225bf48973d50d16d17de4a60671d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-tan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d91f8cbcfe0e34c99b9a613a6289e5103bd333897d8363daed71db98de07b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142535 Malicious code in flexible_hummingbird_sapphire-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093287ea3db394c29eca74215b0bb9f480e30159f5db1701059daecc8cffa24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147933 Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146454 Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144394 Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147934 Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-pegasus-nebula-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74680d60c8785d4c5bbf23d3697678ac626220a25c6896b4e64bbb7e125af006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-html-webpack-plugin-jovian-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4609116949d2888210bbbaff7fcc70912b1a68c57396897b64487418f2b06d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-mysql-mysql-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089dc09fc9fb3f57c1f9e78a954418a64a29db65194c700ebe3e78748d414fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-postcss-eleventy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad70d739b42124f7635a058a8dd4723e947b5e3756838b101ab6ccade1f94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-umbriel-sass-loader-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccb1573c06859dba1bfe1e72f6405a360a83e2fdafc0b598805b17a2260ef7a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-elektra-google-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a9f3c56f15f2dad442fa22d3bd3b846b22b3c8c6cb79ee4de7f413a622ddc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-fornax-yakutsk-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4146fe49f7b6256b420a78fcb513ed920fd481edd057f15304dfa337fa61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...