MAL-2025-159471 Malicious code in manadsi-soaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a676f3b37c4461c639c4abae721336a9bfcfb1f524ceb6896cd61aa6d95b5204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153787 Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156580 Malicious code in intan-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838d05bd2206a1db10ddff3753181f982e5b896026fd487e0da153d4ec23b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169658 Malicious code in ucok-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ba342dbe751d622137b3e16c4055d0f41a9bdc7d4bec97260c4d7555b62c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167478 Malicious code in teagood-nalikami75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9f495aecadb7619276246a675691adf2242c44deb135b2b9fd65687924d7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-xerxes-postcss-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc34032f91ad101ff579e2d9baf7bb1b8c4b5ed7dd11e110b66f1c2a838d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-scripts-leda-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab0ee40b5f0054f0f245c73295e76c8cba5d51b98bf5c7313397217d638b3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139285 Malicious code in aldebaran-query-slidev-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cfed5132e8d320f4fb2fb99af73bb8777c499543b18594cfcbf201b4625eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-less-loader-miranda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed1973c4d5e23397b4caa724b6fa55067f94cee4cce94893b426544617ffa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148476 Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139032 Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d4051c9ad9249e99d923f33b70b461574936311d1e14c8d886825265549a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...