MAL-2025-158682 Malicious code in lookingan-namakita69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6206875dc94a106cbef91b6d43f229664d1d290be4a9fd1f637d4ee994905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e80c43be16fa4235dede1d4ea13d3274181479ccc459fb180beb53e57059c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dcfd072961fd700a04178a117b5a26b2ddb74cbac5fa1330e177c555013274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a01864ac034202b556dc83ca45b43f890164f7f101de559a8d273ea44accb3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc47f894fcd2ad9676c8219b5f0280932840b9b32c2b77ab11b60e16b6e13a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163496 Malicious code in nokire-zabuza10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d691f5e196b1340804feafbb3af1d77ca5da8000e5a14a13aafeb9757f88a35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159950 Malicious code in manttu-nuyati-miop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f335b0144bf4709a0c6e6e120d73ec946673d0101ba52610dcc0f9ccc4539f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-public-puppeteer-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7456e281adc481a1ca201e721d3fe84c7346df5388c89034a25d87af3201aa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144707 Malicious code in markdown-pdf-rimraf-kronos-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cc6121c1002f967fcfc5df8b09150cb98ec5b80aed5551c892f0da52ea61f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-callisto-colors-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbebae1be459a44b6204915a1718da722ca6919bddd78b6ec4410cd9fb6cdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148447 Malicious code in tailwindcss-miranda-aquarius-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b2f9ddd15df74589ecc838ba8b684999addf1ad6470c0b239cb7e34e2ffbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-testcafe-oauth-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac49830a775e6e52064295a2c04405b45053b0115212a36f284f54de5fc706ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-sass-loader-public-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e805d44407ac18708622f0b1838f3bec9642b086a4cfc54149f103ab2b9a4c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-oauth-dagda-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a71ca9cf122bb124c897b6679bb61b645e6812b59362397a8c70fe9fb150c97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138981 Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangga2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49742003fd912b27a4bb9c71f8d8b3780287033ec9bb93afc8dbad08b18cac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134475 Malicious code in iwan-kupat64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6a350bd1008d8509f5e9a0ddc2a18691d4df11d29a8f816d61ab5a9da093c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136802 Malicious code in rudi-taiwan80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b9bcff2ed862fe0863ce1c7af58b0658e03cb05e56b22f8de0927f99004d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136542 Malicious code in regional_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9733874d6a132e4727a02d300b1e00c58f69238076efcac402d0c9b765fee5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...