MAL-2025-186701 Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa590854af1589f753368b9047a4503bc64b6412f3131f3d2bd13cf72a2f6e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186563 Malicious code in deserialize-double-simulate-interpret-tau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1114da922ec6e540f842f3f0bce3a0caef3f8610fdc2dec232c5995fa3a49ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190028 Malicious code in uglify-view-stub-simulate-short (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddf3dc0821ebba5a3a738773863d28177213852142d69afceff7c2feef8f7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188177 Malicious code in native-docusaurus-xerxes-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76fb1a9a37978f3d3ec184f31412f0c5850cada7278ca09f41b5f50858bc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-ursa-karma-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773b5f237f0d46e775245f5dc04ee614693a922904809c9db79ac94c63b51f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181165 Malicious code in teate-thy-sonicbudur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14008d91937f74508ffb22ce206aefc3e233cd2c11a782721b61bc063d7f2dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180866 Malicious code in teate-thy-sonic-pusge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c017212a6a74b133e1286052d575124271fc94558984b44406ddc5eb3e6a23f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butah-asfui-datajufahaguf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b06ad945503d45575b764a3e8f58cf85d7b0c1c36e11324b71a3f670ff98ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171562 Malicious code in meteordreamer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b50f4a9abebd02276738205cc67bc052e7da62532b1353ffae3ef6c9b3da5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molpe-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef93641c1713649815ccde4936f291db94c9ca51ff8b62e52519d41ffd00a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135a3ec5dcb70fa10e9ec4e9685d719bc1676dcf3f37b52ed95a5da61f410bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165916 Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04719d651317939278d9413384fdbf46969deb036928d5b1062859441ba43e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153571 Malicious code in avomainah-frauhufu-fada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4fc78f65ebb674b91645006127ac101811d63c75dd0f7f9f6da38fba2a00adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367bd767dc2524c77e3b7691db41cd2c8bd386b932c448bbdb1e14865130c983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6759c9b0fe0f37d3e11f2585077e760426097fa440e17708d3a3e44bfcbc3868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162537 Malicious code in nokire-genji48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfbb5f6e332e879c11913522ff72aaecd387d5a3664884b95d0ccb62f65b815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-dotenv-transform-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8bc2251b0e9e448ee2693fef77c7fa881c2a5f852b1ebfbb70d8704705c11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149679 Malicious code in xenos-gridsome-start-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b803824790abb3a2c7df66fb5fc2f1b0dac8a77b5bdee59ede4cc7b02092a0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-apex-sadr-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73037ed183207f939a1f8a50f5150ae01af572374af6b4c16597c41ba7bb034d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...