MAL-2025-157721 Malicious code in kuinsu-lki-kopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a005d0a415b1ebb63c0ef02faaf6f7be5661fca43827df6a0243f778f1f023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-cosmos-sync-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144342 Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa871e18d8615f0e0c18e15bf0a02a74ef0928a0fc68986a09fc66ad5202a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144362 Malicious code in levels-slides-build-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8543e56fca41cf3dcb13c8ac2ec0d8d25c903a3e0f9631e4a714703b371323a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143708 Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-lacerta-cache-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d1347a94d835585532c492c3f9da7994e195c7fd6ae8e8607d92e7eabb41ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-quito-lint-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e3ba43d0877d7582fc2289f6dea6ed0681e495e93c77c1aeb965181bff1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-ariel-stream-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f35523ae7e04b5f355668214340036ba014f4224743b24d68087288025b843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141764 Malicious code in dotenv-safe-non-blocking-bellatrix-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3a0f41e22eeffe8e03617d54458f2fef81c61cb1d871598a3c4f76542fc27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145222 Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-version-rimraf-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c8e258cbbd7b05fc7b948248f6d0922d4fcb8d1fd555abab444074a2c1a039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140083 Malicious code in bootes-magellan-yakutsk-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d9eed43e2a4dae5f0ed3a05e412b53eb3228b4172ed85073a6b50778c948eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142304 Malicious code in event-atlas-spica-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b8b530c373832061d5f175a4d881584493dd9a7b8a77b32796735fc9af307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144555 Malicious code in loopback-kastra-soap-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e6751700dd5dafa2b7cc3b3121f35df9e182b23f1034caf2ebb6aedeb0f047c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141535 Malicious code in deneb-callback-terser-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125befea8f472118838c92df441d309fd7c4676366f5a833ccedcb1cba6dd12b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f4c7e98fdbb970fc936c7617e23d49fd8b7b7aaa4fe204be44aa63c17b7a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-teh50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54cc9f4b75383525ab4c1f1cf3259adc92c60f9eee266b27e81ee0bff7bbc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...