MAL-2025-162311 Malicious code in nokire-akaza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab173bdce3eeeae19d3fe3756af48567425b97f924cf07068bf01809439db968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160411 Malicious code in miftaiky-parallel-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314e46caf5d37c19d67a6a4c1a30cae6f8b75e9d429e9f41af6239c4aeae9e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152369 Malicious code in alita-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1398713559e3503e69c2632f51ac6056bb52b5d87526bf32d0e90bc9fe9c6316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165005 Malicious code in rival-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e17b78a7be1ba46c439534cb7547fd9ae81235650106675f6332b4b1624522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167227 Malicious code in teagood-nakama60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7315fc4aa4196f58802e309c532800df298038b143b6142653b07d89d059a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159207 Malicious code in makan-aiuga-fia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d288b398b129482703d161769d66e57fbd12a0e4ff03dc78e3b0b83effbfd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162436 Malicious code in nokire-arjuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcb84a451f990171fb383523baf7f7c195fc6d25b1ace9a64d97f68d88364ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-leda-phoebe-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ef36785234c21c00b9b872a09dc23df76ee5a10435c11ac71e04b7c37b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-rimraf-despina-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5e01d527e81d1b1b9b8d53ba7fcef85426e7e40a6f5e70ab92bd16a5688c3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-indus-europa-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583afe01adedb5e8e87310d4449abc3501120532c4f3a755b7a3019810befc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-cli-phenomic-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb981119709dcf33d9522500fcd9166fbfa538a24b7754e164370e13c45cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-soap-magellan-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ccd77b3d326b562717c132e5824267c56c44d0c2fec12ffdbd096976b6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147681 Malicious code in sass-loader-package-sync-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213c0e72ea60961545ab67de0d5464389a77c618512fd25cfd5a60dca0a0660b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148858 Malicious code in typeorm-superagent-leda-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4647d217a21dc4cef2ad4a2cd3d26af951f19772cac97e0e79ac9d23abdf79d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-winston-sequelize-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c91203ffc4eaf0a77c65aea9d37896efad90ded7919815c783620b1c063974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-mui-fomalhaut-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2f736890bb161d7829091a44884c79fc095594c2c5cf79d556a77560a690d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-geckodriver-semantic-release-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b096f34af96116c9ba91362998d60d98f970aa8635a96fa3e11e0dc8384ec2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-iota-protractor-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df350d081c57b71749f2c728f47c73a9d2b08448b1ac30cd02ee910c3ebb0e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145641 Malicious code in norma-fusion-corvus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...