MAL-2025-160072 Malicious code in manurung-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec7cfb25fcd174234b5f4031cf4035b52c17a05ab30b55a4680d460d09fcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160525 Malicious code in miracle-doki-uikayanabubaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cae7d2b32a2c59a2eb77fbd6d34b8b469501cf2f06162ee40ef1e57fd70f214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162227 Malicious code in nokire-akaza16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dabb4904802cf012b93d3d7990353d8f58d52cefd7d27cf6545d7bdac5d9821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160868 Malicious code in munidr-teddfrd-nasuay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d5f9a4c1787264dd394097f57b7dca0d7abd61d5b043be34a109f87ee6fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-wolf-elara-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797680a710ec1984e98fab2b185ba656f47c264af598ba861fce43bd6dd7b5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cz-conventional-changelog-aquarius-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c86bdafd407c357b4e5f009e701e69157cd73df2a754c63ee12fddba5576de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-standard-phoenix-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8125fbcb49a84aea468cd946024b054a2015742b882bf28863bb01e5c0efe359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-react-bootstrap-cache-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f07bcd268303bb5427b2d483a7bc87f4715738e050d7414c8569c27ef5e1245c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-repository-jsonp-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf60f3ffc03e9fd4679f63b86091147b8708b3bbd2fc734c2156f7e3725ddb56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-hugo-event-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bd613f857983d3b25c2975a1c6b205f9d60613ef6f66fd779c37570d6f82f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-bellatrix-global-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c53213ed86344c710c0b8992fd454b6e99b2e0e6e47dd5aee0188e2e45bd059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-private-mocha-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e752500613866d1f86af372b0dbb9fdc991befb9a72097f6aebc7e2846ef29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-query-rest-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f7ddb9154d6ffab0c9c7227bb580b74dbe26895e4f866fcc6479c477cd2e568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-xanadu-equinox-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff14de308c8079777a0324927098d34e99dc81e491c65b38f040b28688b3d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-ganymede-norma-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383622fc4616a1973794983f9948fc69040a14e146f63c10bd1309edfb61567a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-node-config-sync-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c53e550c282796bdb8410e7fc43c015ffa0b924311c3921e6542818028eee58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-redis-atlas-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a3c5021ded3606daed8e7d2199c0462f8a31fcdf8b0206b3c08d5705ac0c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-materialize-non-blocking-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc6c2ca4e1c5683d6cd7b60e5b027a62c82412bb256bc38dc1ef4c888bad6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...