MAL-2025-157044 Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156175 Malicious code in ilal-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf076a097646a1c97e7165001621427eca6d3699422c1982d66df90d563ec8cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169139 Malicious code in toyota-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7b51f69e70003b26b96358f8e348011f8562b956167e7f1bb6718f3374b84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148411 Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140260 Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-andromeda-jasmine-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84ddb6526ddb58ea3ca57c2cc5afd76d135b8bc9b76babdfa5237dfd09ed5308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-local-node-sass-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ef68d63ede9194c10251a12380048f4bde948d90eaac0eb971d9cfb2170fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-loopback-lynx-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966908cde0064e80dc5fbe3f177c31a09a9571cdb46ee3bd78ed83cee54050d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-jest-ursa-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4e8c378c417792e988304c30b5864031de74fd0ddc5df3e53b06dd10f97124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-polaris-fusion-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e07928c11a8f6e58b9cae42dddfcfc6bd8f19d423bb3f515f3c11f5acc3363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-jest-regulus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca80092c7cd6b3d5f94d680744ba4a6b93e34787a821b83e7bb8c2bd7dea6013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-inquirer-playwright-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33eceb573fb5c10331f4baf63a234582dc8a9784a8d6b1c839b3ac0f7a0a30a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-changelog-dagda-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc290c2c78dcba5a346d338e0129ef0840d8e48f706f0fa46d08a8abd15054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddf581aa3a71ad64ad07ee9dac8fbb7536fec663b15af82f191f14f16c8fc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-delphinus-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9c55cee6479719563af79bac187704a0d56888847f9e09197a480e90cf749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-webdriver-mocha-await-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 157f55477f5f0aba607789f41297fef61b36fc4466909c98996cdad86e985a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...