MAL-2025-170548 Malicious code in wulan-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170467 Malicious code in verify-tacva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3aa51152466b24c75bd35c8d9baf372683f201d2a9db1d57cbff9229beb7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160692 Malicious code in modirai-igno-jinnaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840856f52d78d1517e1e1341574aaa89a6524016c26c5795f16685000421fbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165104 Malicious code in riyanto-120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0f44b2fe18154072f57fb80443e99c12e770f1ed828577bbed49381c73fc44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159453 Malicious code in manadsi-sfdada-mabadvta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc405b9b05fd885664639aa91653d2609f170a49f3c35895d421ffbfcd1b940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154913 Malicious code in fadila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67aa7a275dec05a397abf1e6190186c43ca2fcfb7cefdd00872936a1bc4f2781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170312 Malicious code in verify-ain-ukasiamunisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45bda1d477af173abebdb517e21f4deaf43d14def63dba8f5eb966e749228b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159090 Malicious code in mahnud-nofty-goga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbe5bbe31807ef5ba1564b5b43df319176c0f78f8d47b5c67999d019b49110d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155530 Malicious code in gurs-mip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a8e0a18e7ef3ac2e08eba8134db543b6db6d8fa80e76c196bccfe208fe3bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-xerxes-gulp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca524df6fe30d9a679a3caf1797ead4065707ec93bdd4b4321abec7aa38cffdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-gridsome-odin-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19091a2914c2f8bd7d09ffb63692588d7e84837374a86370809181c64fa1a889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142804 Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141667 Malicious code in docusaurus-hyperion-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5c61627e6280aedbdb49c22147e97245479a467b4b4bea6b57a4b6531be14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141439 Malicious code in dactyl-epimetheus-child-process-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41462714c085d4a678a8e136861687efda75e334e488cec02c6f0d5876681dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144311 Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142656 Malicious code in fornax-test-kronos-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373b39091aad036983cc8935f0362078e6c6ae8a018b3d351bd14c6c67d98f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139227 Malicious code in aether-cache-telesto-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...