MAL-2025-186841 Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf5bcf2afab2b331136836c91d71ee1f886593553e406a307a1708222d4af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188269 Malicious code in nextjs-shelljs-centaurus-singularity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c55363b3a5905f100f53657d0b726caa73dfb097b64c18ebd0409751dc343854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-nodejs-hugo-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd615312860e6e2a3a4cc57cf701c017fa4ecd15d5001d0580f63e6e71e942e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190139 Malicious code in venus-nextjs-heka-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce32a190eba19f5be21cabd7b1722d51a5f1046b2d93dd087e5957927c771cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182335 Malicious code in imodiov-kofi-cuic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcfea0a4c0f8a5861e494bc6d94770fca281600d82d8faf70168c595be84ea8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kilan-avumanaiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db629712d0c323f05362f626b330c7e855c18ced48ad453b34063bb77aeab07a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anala-akin-inuuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e50f36b27d5ff3059229506d9341344a9907b0c46e702ed4e2c304e9c40020e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-masi-nudanif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7d5b2995f29a0c367a9fbf04549dae95cf2f24d22e07b72c4954bb9b63aecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abehhhh-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae85fd0c1e0547c23d771e514bc05b228a4a03a551f842bc850501ae77d1bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174924 Malicious code in inul-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20daa5f3adb1d6c165ad3098ea6f0144b7e9b6c99867b8212feb1e5de0be4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174561 Malicious code in haritono-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9bfa6dab4dda6d005504aeb4376521adb6d4286f4040bc59c09aceb04f4ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aafri-zidan-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaeba19459dfa0b9ada52fa4acabb7bd0a3268c5c3ae1a45830fb93b79118329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sumpel-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c245b66c9a8cecb0e2fb7b5add1a91ad13fad0d5544d014c3809ba5915611a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-sunina-mubana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8248c05c4e2065670ab84204b8e2ffb15d0547a90eaed8938a9d5a68d30446da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178195 Malicious code in rindaman-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b6ea4f31428a239d994a36d95b7a90fa0a45ea0c8d2374cdbe366e450f7345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171393 Malicious code in jacobroberts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41cb54366dc2b468607b623305eae36cf31d6618e07f097ba13d892eae2cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150019 Malicious code in @mipta1/ewraussjfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5c3db7301d2d272ff2072c02b7ec7b95eb3fc353639be6376bb04e47c9e40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159652 Malicious code in manda-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a601506e383711586440e54fa6a2f0a2c568c49c5a1de45e4c167d2f1810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...