MAL-2025-150615 Malicious code in @miptaa02/fasseg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eb0c44daa2f255c3f103163835137b321a374b87e47224e1d1d1f5e781124fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160030 Malicious code in manurung-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6af0866d8eb561fe628f507123a4b6b772175438dda7481d19a80ca57e0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163335 Malicious code in nokire-rara46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6a91828cd573252deae4cc0f776e7fe159d736c98c940e69f90080ec4d7b4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141844 Malicious code in eager-aquamarine-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13de1aa551bc22651a383030536d10cf1f8f16c43b6fef17e79218e66d5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-nightwatch-parcel-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf715bf25efa7cc4338bbd3849ea8c9c5f15eb3cd6d1efa2dab6d489b92b72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-remark-upgrade-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8f4bdb1f8f040e33ec40f663df8fe7c86704238205484e4164f4e960b24070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-barnard-celeste-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bf4dba0f62e68b26b76878950f636c0f6d23426c994f7d6d9192d30e344b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-readable-thuban-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee7af91fc32c148f8c4a3e601df8ffa2dcc65f0b9e8a59b9b012f3e6ae5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-docusaurus-phoenix-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 996e2a382de928ecfd8eaa5ae6f897a6b8b2ee9a42281ffc74a5128505b36f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-init-ursa-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afa36b30aac31e7119cfeb26ffe73ff3df477a8576ff60271690db8e7934ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-backend-cluster-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137494e90d691d103e85bb0225ed5872324f19293c8693136a7256c055113dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-library-virgo-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 403478779c33351d238232dcc3fdb2b77802c9afaa62025f5fd8fa6a8d1ae546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-process-phoebe-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedfd081163c847f1ff863e159d9200b21691d531407c7984a579bedb9e7419e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-aquarius-corvus-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7008accfc22c14a8af2b886aac5141f689ae9dfc2cedcdee94a9ce96e0ae2897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-jsonp-parcel-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb23bcd2e28f3cbf0db247c4c93ccc0d4a606ec4fab7f1500a5209e6bc140297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...