MAL-2025-163821 Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168560 Malicious code in tealove-nokire31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98fd112f1d5a2a97cf53cc1cd7f7e83cac4484b35438dfc07583227419d64ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160527 Malicious code in miracle-doki-uikayananbubaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5419a5382e3d56f3c4c7909e1db73c23adb6c455df76adb59a7f40c79ea131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154297 Malicious code in dia-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ac85027aaf7e6b21aff4a5f4546402587587bb61053fc103565db2885b532d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-yaml-build-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894adbcc9f4739bb639ca7e40464f004fc072698d0e1f78d208a3e9b8d3da697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-websockets-child-process-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd862db44f15783dc21c6573311ec73ab09a2f68e999308370e492454719c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

MAL-2025-139273 Malicious code in aldebaran-electron-builder-subscription-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abc784a8bf74e36e8288aef1dd04e6dec28384acd38f24ddb4017757aebd310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149898 Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-pink-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca66cba7a49e0510546cf9b5ea945ee6b4d7739adb038423cc8b23b1e01c981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28c3d6ad0dc65f72c6bbffe017757db83b568ff28eef514d011a727633e9d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ea671934d4935f63462e233b16c3968cbd95f6b6a5c8d6fbfdc2c0a3615cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-rujaksoto28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3065d3ad0545e13c8b7edc0854cd4bcd967c6c145dffeb9e72e2ed23dfeb84e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135232 Malicious code in lisa-kupat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078086aec213dd7b3ffa8c1a11fe2c9d60551fdb2a3c5e4e5d7159e08dfbde84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132240 Malicious code in bella-asinan100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49c15dc564aa3452be5c1bf520231e359fd91b54318ba02ead489997936e0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujaksoto3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac7cdf69e7b65b92d6455538819a6cd307dadda9c5ca1cc18d67bb41a11a25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-sasag25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16661538a7c457bd4b5f28017e5f3f4cef3d8ed7d80e7402aecbd157419f172a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...