MAL-2025-159312 Malicious code in manadi-scaior-dareda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b38fd2a76a85ac54cbe0577b24dc24c9f0c2d7c46691f5acc3331a398febfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164822 Malicious code in rinto-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757db8779b7df46b5dee0bf597bad409f3b5423fb4993bf0b7fe46d436f7a226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagangagapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385d6659d235ccd4a035e8fd6eff4301cbb750ca64b0131ca2618f1b24f4e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158738 Malicious code in lookingan-namala28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eff25c706b3a6ce7d463b07440387188b92ea7b39e197afbc315279cffae4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0950380f549807d5b53b4c3bcffbb23484b9cc813cfe917cf3742a97021a3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-aquarius-nodejs-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f67fb71a3747d55826f4467a6d22ba0c7a48f45bd691fa8a323662c2c86b26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-norma-lyra-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c9e34bcf1e3c5b6e4923008129abe4146826a6a6147d34d768d2ea843dd9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-alphard-sirius-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c805155bc8b2e40df017e26f58e664de20bad1b1e5ff36ae71477544f82c9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89d2ffb05d55a0e18788627ae122ac61c109c866161976ca540df6e5ea69458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-kinetic-leda-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e61fd0f8a954efe8419f09851f40c614971a38e052be8080419ec4775c845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-apollo-ganymede-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe44379e5b6375b7b9e7205ae5e582c5214177af83c03cc6b4596fa80f3226ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-hermes-octans-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bd65c2d4862529c0b647b1f47ae5a455dd8490b38d4c68c7a3f582961826e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-docusaurus-telesto-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89751071ba446007244038c24eea5172d39c9745d04148d57bfdb9056109679a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-kinetic-comet-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d047e35d93dc96f143db92408aba214205928b1528c598917916a50e43055117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-mui-server-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1cbab30830c258d4279b46b8e5d3cde0723f00724a5e0e18c073551ed2ec03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-aether-betelgeuse-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22bbc49c685a44aec9fe6c306cb5baa37e082c4a9492ccaf2e80f03045c3420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...