MAL-2025-154509 Malicious code in diago-kulpo-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b769a1b15cf774290003a7440dabb18373f8c474a1623a1aebbb06d960d6bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159645 Malicious code in manda-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087fd01bbd5a8afe7257044bc8dac522dd1f955beba5930ee5213e0e8631a26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166647 Malicious code in syahmuda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fcaa830d9f628881e49a10eaac287a95806d1ed8c226026f95ae0ba36f25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159821 Malicious code in mansila-tiafala-magololsaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d08f5d805d8b6df8147dd7ef054fa9a2692419ee6673b7f09d81f1b3961c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164818 Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167535 Malicious code in teagood-nalikoli126 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b596ce9e5f0db3dfb73d1a204b7b04eb9e07d2aa3635651a6305ca0f097f6aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8010f76cfda2befd751a5c896c91149a0f373b7790b0e04c5af24947d4a6380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-iota-karma-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77d50f56b54d38b72f23620182a6d2983ef18256cba1de345bff838382831c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-protractor-pegasus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dcc555cc9febd60400892a5d0811995a23d932397391f02eebcf61fcf6660c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-nodemon-hexo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb987aa70456a15020ae5bec6d92271c204109174d673318920306584bb123b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-janus-solis-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d32b29fcfa0498839d01be9c4a856f8c419b395efdc5d9599ddc46cfb37836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-lint-local-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ec276f823fa984673f06be515e340ea0f44cfc759167248cdfee29be770f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-publish-algol-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ad0c7f0873eed2414d8735a62b4acaafa6114b5375c2436c1ce6cf3fabf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-phoebe-ophiuchus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35c8992fa4656e9b023b1da0ebd331ecfa929abfe74cfb01985916ba08edcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-aether-eleventy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2ac218d0200b49353387650eb8b52e2f86cbe2247112a75355d2a383158a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...