MAL-2025-189272 Malicious code in rollup-plugin-hugo-library-biotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfcbb6aaa74c1d1e6c43edf9bb28be471d6d94ecc5523308acc2dcc9e68216b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd47f334375d33b7f5355699c2e96f3d242ef26ea58acb851da24561ff8a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/etd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db96ee6a4d64131028f0e8eb4d890c14ac717f19978c6356d9e54acb41060602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164012 Malicious code in parwo-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be543d4d943ab6bdb9c26e1c95884713b9338f280f05f03b62b6e615b05c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-cli-gatsby-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b133c2faa0828f05d2cced737939fc945efcbf768f87e784c308be304c1a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122705 Malicious code in putri-sasag86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7477a98fd3bee2d0102ee4cba9b7406aa10b2a491d67128ab8ab89a5c3edaedb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109829 Malicious code in trent-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75439577e258d53084b432888c855bb360727596b9a73056bf135ddc6752e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f1d360d4fc365414252ed69dfbd27d08acc94cf5dc8d5c134ccf727e74eaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90491 Malicious code in silent_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753e2c34274643010004ea3e2f3fb456103a806431608365a58e3d1fc761e0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79553 Malicious code in laila-jengkol38-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa17d74e2495514fe819e14587d3ecdaa37bbb144b28ffbe9641c1a9f8ac8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...