MAL-2025-161881 Malicious code in nasrul-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce7a81eff1f09cb018af6602b90ae97c1754b9746273f682985102575d51e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164932 Malicious code in rita-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6a9c632462f742081bcecb1f4dde65945e00be762a9afc9602363bfad634b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157210 Malicious code in jurss-sdfud-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23537bc0d863fb166317b638457b5c22be05fbd044fd643c0e407539c89d2707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-terser-semantic-release-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4740b5cdbba2d2377b1829c9da61e44e441d93edd5e03312be87545b04a45ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-ophiuchus-envconfig-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71777ff20b2261fa16a73576b34d21d19d404c983e8f479a1239d8d15976b869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-protractor-auriga-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6c74e5d8b67a20911a113bf65794db83dff4dbdd74a3b2a604963ae5a756e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-lynx-neptune-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510019b85afb9e4e1728b2f031dcc773b97174840ffcdc884eab7dc011eb029f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-style-loader-grus-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6981d21e3d65c60637859fde1c38681db6c5965ee98576c668ade20b35449bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149092 Malicious code in vega-jest-leda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97bcabc2b8fcfc5de703127ae1c9a7161c8f7d69c0fd95ffbecaf28045c4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147163 Malicious code in rehype-auth0-superagent-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0608a928572c4b7bfb6946da1d1256c1306c074a7c2dfc451c142f079b1e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-serabi57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283f3d26c2a0d50d046a080d62c06c5ee81d39663fa72adc9fee534842024ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-rujak19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c0185b4eaa0d2d1570aff109e296af8921b0fd2096b525e8f6d4ea7d3af7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5997582bca2faaadfdd92b758359d906830a4a8ab18861d83d3350c93f46a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e399bdb0b69db44599771af0acc3c340f0516ca4e2b360cdd8e8efc77a84d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-keraktelor97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2a9e2f8a4f7e9b08936b791db1ce6b0f3389412c2743b6c259dff542b8f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137063 Malicious code in special_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef47803cae574594b0eb47f6870c38fdc88d32de8695a988c4bf3e898d4388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kupat63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe110d05dc7b656d698616729c92fd08c28a5b1ed08e369893ae757d09d0b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...