MAL-2025-186841 Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-dfg-dizcb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1251d8513f175dcfb4bb2a28757553e7bd1af1579999d42196456bfd0e1f73e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9aea65dc9c90029c165f47398167d78b5a2d06646d82b5f3b5ef7e63c25c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-npm-postcss-loader-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66207fd0bac9416813a894faba768dc4da329f3282fe3826e0b88d6f0db7dc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-sedna-centauri-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81bf5c1589ac18e2c3471d0274bbd2f7da00cb75993fd0a325f908768672968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-nasipecel78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf224f86713ed2923252ec33b1800ac2ee2fdc3ff8d17a6a9a5505d498ab25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103800 Malicious code in hostile_kingfisher-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2b93839682402940f98efdc67bb0ab3bc800c104d2cded47297d3d626daf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107027 Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-getas82-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29eca9b101118dd5e4fa9a6daece4aea3aca7bae6a580780e2acb9174290391e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-rujak20-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a4c6a5b2da2ff61cc5dc3ebe14bca019e9ff634bfedb3c8dc2826cfc1429d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76553 Malicious code in zaki-botok11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c7d2b261ee2b75bb543de460fffb0710ad926b55af0203290c96d0966e0f3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-blue-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf5d788a480e941f1b36b843708ab8ec0619ef2693bc8cc761317503301969f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62747 Malicious code in enthusiastic_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0284c018370821a5f96fcc435c714e30f7c2c8b7a145c2d699cdfc7e3bf2436a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bubursumsum89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe607656640062e5e59c9b38c089c480f645c388c0727ec87f961e1cb3d4ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...