MAL-2025-162716 Malicious code in nokire-kore29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7498c2049146dc0841650aa7ec80f2366d960ee8a2d39a650939ce1b970b8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167928 Malicious code in teagood-yakuna67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c407757910bf8dd2c4bba6b704183f37a6567802505e0a0cd5d85f9021e525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168164 Malicious code in tealove-coki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f2165aa2c5a3abd122d1a542037c72e81a01d02ad22aad35a47e8be75b4032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164357 Malicious code in poli-akilu-lunakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e07ca5dbce861eb7ed7e89c9a4b906687a0f7a850cb973ec910b38687946223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154462 Malicious code in diago-kuli-luvakaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ba1d7c336f11f256cfa5549e51b722affa7ca072ff6a588f4f02acd0133b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158412 Malicious code in lookingan-nakomi6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f5699869d677ea81687e769c7b26e48549e940d76e2463fb93ef68c746eee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168577 Malicious code in tealove-nokire48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178231c2a2821d70f902b11df8715585e8ed616519e4b445639afddd7bd7bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151260 Malicious code in abiba-avbai-abunahia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b007546fe82f32c3ed3b08594c587b9ecf8f4440796daa00838ef2efa91f1e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-oberon-private-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3f2cb0806cf61edd320aa4c7424aed2cec173f00e9f069a575bdce405dad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-run-script-soap-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c743fbefc7e8cd66f8c40a9ca654f606ec61084227cc77fff259a56548994d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-soap-csv-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a221aacf876e5efd581b49f8ac78357085e05aa94059a88526f8ecd4190f6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-configstore-regulus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41feeb09f0a84aba33cef6885ce6d13ed77111fa4a690bfcfb8930d9d5d13ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...