MAL-2025-169493 Malicious code in uaragia-mudiffa-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d18c7b13c109080d53443b621ae3285c530b286c10500f1741c7d90e7b26dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167778 Malicious code in teagood-sukuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e3d568831188c08cfc1c309c5d9413b28f263d1f6803b6bc84e53a7fc871c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166403 Malicious code in sunderlan-ud-vaalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661483ea68ff843019185bbaf6fa0368f04e079427aeeef043dbaa86a4659ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155924 Malicious code in ican-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d811f3956719ef82ef96052d62181c557e0dfe373f49b4ee0da3cc0d6f741bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163501 Malicious code in nokire-zabuza14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662966eda0551b2a9de4ea89258c736495aa34127f36d3a3fd457fcca4a1e886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166416 Malicious code in sunderlan-ud-vakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76363f48586a36677ca5964f41d37e19d425c35388c684062e615006e9c42b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-less-despina-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4efe3b3ae752d0a2c0807a034dcc8f4cf24696297e1894dc32a449ae57d23f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-dynamo-europa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-await-nightwatch-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599b02ee33e0ca172ba387eb8fee06d5bd917b1b51bf2136c37300c417901fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-spinner-gemini-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ffb5d26ec0c2beb4033b4f6c4859ebbc33a46b29f81cce2bc4daf1967c915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-rimraf-local-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054b2d956edf01f7319f62c077101349cd5044afb5c88bc418ae0072e0c3a095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-auth-nova-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e345ac51f637602bb21180a5a15e0c808801e9c9c5860e07eccb477eeb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145285 Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147865 Malicious code in sequelize-equinox-lacerta-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3e2d46d3d517afc6557d20aa925eda1d31db589962ff1f1696639167d9e4ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...