MAL-2025-189897 Malicious code in testcafe-markdownlint-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb416541db246687e8679b0e1dbca3a372426705710771e12da27b8eab1200a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-dci-fwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0927784b04550f7b46d557e1801dedb4768e9daf49d4070550dbb4d966511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181924 Malicious code in flight-iltag-zilauma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b656d74e1d3869227cd57afd89e2feb5e5721280b2e652b6e816b915b6b0d682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mitokoik-oni-oladiaps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef9f9f5b262c4492f47da84c3f870db66f9a4db7a9537dab9b6be88fd2ca333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185175 Malicious code in sonic-oig-tmoaca (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a0dcc8ec12dd4329702c494e32b54c6d94421362325cdc23e97419b06bd48a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184005 Malicious code in mitok-oni-oldis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6c6a932a6bca451cbb1d8ddb44368b8446e1e5eb4124dd9f6d7a453beefa7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/karedok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8002834ffb5b2a795e730681a6f3acf6b237f10b301970add5c54d833d41ab98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buis-manis-mioapaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac2a638312065fe6a5edcefe6b7a9b183e6cd858a4bdd20770a1f4ed746ae55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butry-posiy-nuytisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb1f9df98263bbaf6e2e73e8e4bbbaf1c1ea01d341f3285af458c5115aa3a869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee1589c775b2354d8d3929cdc5e1ad3ef21232defe0c75bc1f69fbee8455e9fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177773 Malicious code in polymer-ahia-aahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c64821d83536d5122b4ce9a321da7bb0b80ade96679d5a530b0f49f9c31d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-guld (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b869bcfb1c0f1f4546a805fcc30ff5ffdba389863b62df13371e5f33eadb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42d70b2e15c01851177fb992e577c80cad783954ec0a937f01e0bb2b7e153aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169952 Malicious code in uinsu-lost-dulaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3437fa5f56c97256478b07ad4a8860682ea3da1125ff06ed7791a3322c4694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278c9154cdc9d769e59b957e9975a02a68ce06e3b2302d6df66f4049b43dfdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153233 Malicious code in avminah-fagnias-iofagigag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf8d91a006dcbd536acba2bdddde69cd50728fd5112126d3ec6614701d1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159007 Malicious code in madrid-ucl-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09eebc2369ad3baa2f9299a968c329091eb03cc3e81ecde8e43fd88015ecd1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-spectron-webdriver-levels-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59afb146d54e37d45ee9758db697a52bdfbf02c0221da29a86c0a21320fc2a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146050 Malicious code in pegasus-rigel-bulma-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10efe745ce9a8c5335e8fc1b7f9fdee45f7376be426c0b9e9774e91939f7c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-lyra-react-bootstrap-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96745fb4e087f1d2fa6cc12f0673c34c9c89de6e5261f9db9d80208c34740662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...