MAL-2025-158731 Malicious code in lookingan-namala21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5049de5bfe9494af84685ee064b8b8676e984815315278d3ff4838080fbf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-apollo-envconfig-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7581617c1f3dee8f77877ca1efa376a3bccbff72945c680780c545962c3ea85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149372 Malicious code in webdriverio-indus-puppeteer-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c0e3f43d11407c4967436f5bdad502a49fa32569364004308ad2437a3c249e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-xenon-nashira-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d619d3ec1c004b82174f5f111ee6cde591c36b7917b4e041dbdba08bd61a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148170 Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141798 Malicious code in draco-wasat-miranda-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7854af127c6cde6e23a5aa64329b6e001b5ca79115617c855e6e263daf890134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149387 Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138414 Malicious code in zain-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1755f3a04bf14e1a8d1a6563b00ff4a089e7c6e13ef475272e314cb51e2e8e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff734237a2b022407ca20b57b2477b4c14c82f403b95816c9f0899d77269ed34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135410 Malicious code in mahesa-tek23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3830ad9de29bc52e7e3e00db24099622d69b6a91adb5857cdbd1fead38f17069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133766 Malicious code in gita-bubursumsum79-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ad5ebf59d5ed7bc3240c03fc74b6966bee9fbdc9676132a64cdd0db27af68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126417 Malicious code in fajar-pisang48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc995468b57a8926754bc1e585617966ddc91a5ff3dc1774042b486042cbe084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128810 Malicious code in nana-dodol64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5973c84e7f104d001d3dd9d3867743bdf5d02db906a124961d1fc992036bad83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan98-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9c5edd82d407fa73c9e41c8fabb719896921650f7f23d6f7734b52602b5f20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fda8c0a48e065b8fe5f2dd091bc3f3e7feb24b84c3b7fe522b2a40dfb13ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121814 Malicious code in maya-nasipecel31-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdf18e8649a0a274a3454975af7db4e192d3d419cf64c8ac7a2d289783654fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119850 Malicious code in ethnic_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b8ae2182f23278bcdd740a2032b5fbc9b77b73b25c0bb9580524ca684b98c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...