MAL-2025-157054 Malicious code in jelek-rasismem-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0602fc140b1df9385ec11e79322715fe19ad4fcb77a805b6589ef9ef852f3d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154105 Malicious code in cinta-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3653e5aa55135b1459e9e03c92c23ddd6c6b5b4c71d8be4367a0fe35ba53c7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-less-loader-less-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed17eb82e66e960db0daaa93d23a0a33f3a4afd2a64e3a3e4b53ec6afa7a13a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-europa-exec-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcb5b17666335f424f3b57f121a395c4a988c839904a66bf1b8ba23e5816471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-csrf-dotenv-safe-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26fd12eee08a4f07fcaba1a5843f9168cb580449aa6d44aad362c006e15aab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in algol-upgrade-ini-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac480b2708c408bd3e270ab7728873ee2cac76bfff620699b9d1e38965fe6cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-juno-grunt-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b678e6f76e896515da8263350bb2c055dc7d0e32726f5a2066eac0f4cc0124d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-tethys-vortex-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e13c39b9392925f5d6ad9cf3dbc8489c406773998529d48a03bb729ae664295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-fornax-await-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af7f910b1a0e23383dbd2120e5b535de66e98328775a099283703bbb8bb6264c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-karma-sqlite-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f16c0ccc134f3847d2a92330a4457c4e5179f87c348f5481d1e1a54bc674c721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-auth-run-script-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ea8d5247e207793334085e9414f90e48a345f11899bb3aecfda512eafca934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-izar-winston-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b9406e604fc2c6303c12f06f2160878421f2a4257836f24b73c851fa490122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-weywot-style-loader-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e91bbc11f8b148a8959b52cf9b8d8450fe3dd51ee5ffdddcc8362d2d244e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-eleventy-sedna-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76a53b8855f0c1929c9ed27e787320d21b2e4df8ca1a9760a0f6820268bdde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-odin-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01bc67b2111bbd551d0c9c745462194540c9874d0858278baf52970910e982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-xenos-xenon-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c744d5eb04b0340e2461f09e10bcadd760e62c092ed3d0cca00dad88f572b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...