MAL-2025-151191 Malicious code in aben-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b299d70ebc002cda4da0e84f5b265c63bad0f702d16c10abfa3d50c6cd4877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bf5508da59292551a646461a2c700724173cef6a02ef4c7244e7023a0def0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-spectron-elektra-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfc5d8be3241831b91454e7c38a3c68b1bd22f5176c552f8e6f778fdcaa045c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-remark-rimraf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 714ef1f3aadd820dc4f68eb12147374722db65daeeb986feb08523154cd2607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eris-rollup-plugin-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9c685aef5b5b9c0f020ad1b241c7b6dc706cb726fd15aaf95398f50602866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-cygnus-iota-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87ad769ec5476d02c6dbeed46e43ec25e7454715b7d55eeb428f0505d2483b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-nightmare-corvus-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459dcf63d07e643ce12479580318ca479b9443183b139b99a36fcc6544ce78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-nestjs-jest-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ed3cd5df3b5322f2a5d0825228171b515a648d59576428600d2715421605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-tool-async-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df7ac2517321d627a4a92a8efadf37ff3d48de62cfe0c4c274c0b5083e53d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-canopus-deneb-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47d8400095d678d2c3e3a68ff75d19cd50df496f04eecbbf4ebf7d8b3de8d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-iota-deneb-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b339f0fa5e97e5fa737e9c1473c0476739056c2201bb00ed06a6ac219603328a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-testcafe-puppeteer-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c71853a9de584909c5883ccd78ffc9b8a351786373211c69c929ccb1f4765a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-vuepress-colors-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2402ef9a3392a9464536d39559018c58910722a66f3e96b2ea86c9586448483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...