MAL-2025-152582 Malicious code in alvito-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9385cce81cd938ac5ac40dd42a9d1d1224afec900faa6e9dfd11a67ad8d1f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168319 Malicious code in tealove-lady14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e48f058899f6a23670cbdffdcd063fe17763b313bf2e4bfb2c956f35822ee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-igno-jinanaguhifag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7795bd304a33e8885a7bfe5b04c06bc253a648f5f240cd286d0131a249879fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163660 Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153787 Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159471 Malicious code in manadsi-soaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a676f3b37c4461c639c4abae721336a9bfcfb1f524ceb6896cd61aa6d95b5204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-auagasita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20675ff85c14eee27f23ac16716e744d137ef3de4cb1a75ff5649626b2be54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-xerxes-postcss-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc34032f91ad101ff579e2d9baf7bb1b8c4b5ed7dd11e110b66f1c2a838d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-scripts-leda-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab0ee40b5f0054f0f245c73295e76c8cba5d51b98bf5c7313397217d638b3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148476 Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-less-loader-miranda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ed1973c4d5e23397b4caa724b6fa55067f94cee4cce94893b426544617ffa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...