MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-proxima-semantic-ui-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653895f8925b05c1c5a5f3796d814966f8c2eee89351d88d6f07bf2bcdbdb890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-eslint-plugin-procyon-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6096faa5e10b2c385f98c2600967ae8fad4414fce255c69a7c8ae1ad0d863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cluster-betelgeuse-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8566c2ab12a83f43b06b438c52d6e0cedc4ae293d1a73f53300b8db6e9422b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-public-lint-staged-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5f757976b5c1d33d87826c3fb999e29d6ecc67ca0b190cb803237d8aeaa20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145225 Malicious code in mutation-levels-antares-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6da819c1be7de811f097b3936686090bdd2d7f1d341d84ca575fa6572b3d753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140953 Malicious code in commitlint-auriga-xenos-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb906d86cc0ce4b7f22a79fc879e93b1bbbb1edcf8e8ec7e38e60c024b69811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147580 Malicious code in sagitta-await-nightwatch-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599b02ee33e0ca172ba387eb8fee06d5bd917b1b51bf2136c37300c417901fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147438 Malicious code in rigel-polaris-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138757 Malicious code in gothic-plum-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a609b5dcf10477d4d9e3252e4994993f6206ef46bb9c00c30ae5de5ffc8e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-scarlet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d625dc8392046d7f079d2c9f470edf6e05d3884f821185549c04b7d8a46d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kripik50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb18adb5e377657e23d61aeaede03341168f8c2be68e4e45eba7c94a5e4fafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tek38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14166adb70b84ae6a2b08c0512c3bd4e3f07acee3b4832d81e016d80bf557059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-asinan78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf635c6d2b0574cd7cadf1d660c687a5bd7b752bd7cf376f2453b1e2bfe8ed11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b703f5e6c450830a5d86e49a7af32aad53cf82c94c7710af6d3eeffa7f0be2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3134ceb98bf8ed05c462cb28e0fa2f9543a1bf19864bb487bcd88654e1ce624d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kripik40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc8e92bd55ff44fa62aee82502896fb980a500805647d58d4f9a093a7e16b09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-klanting6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad936250074374fa3c68f8f42f09030b28d6b6e3eccd5c732809130d9e88f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...