MAL-2025-157709 Malicious code in kuinsu-lki-kaopumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83218c415339022e3b121a49e4eec1c1206103e1b8fddc02178ddda91600e15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158953 Malicious code in madan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2c2bda3f63500e5944ce3a630acfcb8757192bbb3a55da45046a48574ca4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-slides-terser-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcf12d647556ec1a189a342de9119f3bb7327fd345626738d7f4c030458798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-ursa-resolvers-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25c80819ffed81f8025307256957f70a647148d6e5f6fd9033a58fe0a3de2494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-carpo-eleventy-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in configstore-enceladus-reveal-md-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14d8a3120c190a34c49156fd1e686e81f0eb1c3ae6171c5f6d558e8b32034c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-husky-cosmos-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebb451c9b23e274e850692c02cbc655f875c2f814390198c1adbc3705315c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141743 Malicious code in dotenv-safe-astro-sirius-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cb87dd0f0cd51c19f01a21a145760bebc9a3e39e9fa193ece9d01ea33fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146959 Malicious code in quasar-remark-csrf-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c25189b3a691795423dd2332b3e847b1d49d056a1fe6b209d2b7b7e86ccd0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141143 Malicious code in cors-webdriver-mocha-perseus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c2031d8b126402d9b46d15dfa6a520529fcbcd76671a34f88fae11d8c008d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146504 Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143388 Malicious code in hugo-eslint-config-rimraf-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfccf30b1a5f7c4f96740bbe3fbcbab70e17acf331b86b4d3d94a861e7f4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-halley-eclipse-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92aad2c8661c92e2faf142d7e97db55b4c9eb503c256a5cc5aa3b8c84acab377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-rest-markdown-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c181eb94c8e6a468e01673ae1bf6b8ee71cd0ae206586789e6a3fabee48103e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-morgan-janus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd78f6452c53438ce2b7a8b563f876a3aae4bb238685a29b9a56a2f8df8234bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-remark-achernar-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddfcf72846e3067c595237cd37d51c7e34b6ba2449aea6d0f09e94d187593fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...