MAL-2025-160259 Malicious code in maya-teadf-isaudfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3041d13a7413a34cdbcbc59aca9edfda316c0f7216da463af25689f6b5af2cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154437 Malicious code in diago-klp-kalouba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff4e3266ca588c45c067ac7cefa0a0811a049c728e9388beb162efe728ac0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157206 Malicious code in jurss-gswzasd-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359cdbdef7d25cf76ada28ef87c4ae5ba50ec1193cc7205183f2e990eb3528c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b65e648798ef08cd8a3f044b3f2fb4221c7a145330321166b0f18734e9b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164421 Malicious code in polymedr-mindatas-buip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e25a99bf946535fb00406d56117d88d78cc6dcbadaeb7f9f4999eb9a7171a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166337 Malicious code in sunden-dibuok-inumaliukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab97ec451b2228e85bee1b06f95e37ab5ec25aad3ab7e300931445b2cb3b179b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169553 Malicious code in uaragifa-marae-safari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9582255266a060853a59044abfcaacb1c8cdf7eaad50a7063737d27fd511dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170078 Malicious code in uinsu-technls-portalsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f6987f468b6fb9d58a3f30b953b0e2404e2f275daa1b15ad625a828fd49a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156528 Malicious code in intan-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e078e5cee8a0de790ffa12c0dc099cbbda9d7daf946bb6da8b893b3b93377438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167311 Malicious code in teagood-nakamala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b2e6d4b1f0b6116775216cf5136a8a17361a609043ae972bb68eb62156931f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-meissa-zephyr-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184ecdeaa3917c9291a5b535a0b3fc11bc061913eb43b8f6a9163e3a070e4faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef1665bcc2a8ec8540f9a34906e1523c5f4d6eb99e68912b49f1c6758531391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-leda-proxima-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f32da684de609279916e0b8a7a1c9f1f821ba4d68df15eb3d0acbe9e68dab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-geckodriver-child-process-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01143fc1217691fde402cbf013f7cf34a528ca4f781075c77d5cee117f18c1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-lint-global-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b343b3c7c23c80fbb1559d9e971d309967cfca013ab9173753f6cbf65fe92735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-nodejs-nextjs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...