MAL-2025-157960 Malicious code in lala-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae730593326c658099057f84ebd89c8e15b1e471bcc4103cf5fe14a5b1c42ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163456 Malicious code in nokire-sekiya64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa72511f7bd6b20377307c7051f85b4c24095aaf6830d22afe4e6b01be1d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167150 Malicious code in teagood-manaki81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef188f6949eb4339a26ade8240a6ed3d33b183b8e4d4b02e724a5a3d7bbeb044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168089 Malicious code in tealove-aruma33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb8dab42931a232affa1faedf6d6c8503a57ac4c47315328f8bdd7b0ad1ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167322 Malicious code in teagood-nakamala56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c1f86c559027805f24f9a9f560935fc1d8d0c06fbeebb61bd43ffde55a0c6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-prettier-plugin-markdown-zephyr-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b3ef52b43da2fe6d4c198943373ceb6eaaa3a2711589e609220e6dcda6cf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-arcturus-pino-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7270b9ac19aad85ea7e97512b7bb3c2f8a2d344649d14905875aeec372a852e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-ganymede-impulse-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145814 Malicious code in ophiuchus-enif-scripts-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a88a2d92d1bbec97dec9e6e2c4653bf050e9a037ea9989b88419bdac73c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148596 Malicious code in testcafe-hyperion-envconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75325a6cd17ff0185c982e5269ab753bfab2e7cc19234fbc8456515a4ecc2381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...