MAL-2025-168954 Malicious code in tehah-coffee-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16afc298b1a8d4aac056b16104491f806f22ca64a62162e2318521465689bd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159928 Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169425 Malicious code in tusya-fss-s3da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbc5e4927373b6686197cb410011c12e83b050d70e1c6ea1324f1579b9c2f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160527 Malicious code in miracle-doki-uikayananbubaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5419a5382e3d56f3c4c7909e1db73c23adb6c455df76adb59a7f40c79ea131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167370 Malicious code in teagood-nalikami1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0232b97b3b8ceb50c97a5685407d13cbdab148e5b2bb0c4f4fe6a3b7a2b61462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163821 Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

Malicious code in levels-yaml-build-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894adbcc9f4739bb639ca7e40464f004fc072698d0e1f78d208a3e9b8d3da697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-websockets-child-process-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd862db44f15783dc21c6573311ec73ab09a2f68e999308370e492454719c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139273 Malicious code in aldebaran-electron-builder-subscription-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abc784a8bf74e36e8288aef1dd04e6dec28384acd38f24ddb4017757aebd310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149898 Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-pink-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca66cba7a49e0510546cf9b5ea945ee6b4d7739adb038423cc8b23b1e01c981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28c3d6ad0dc65f72c6bbffe017757db83b568ff28eef514d011a727633e9d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-rujaksoto28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3065d3ad0545e13c8b7edc0854cd4bcd967c6c145dffeb9e72e2ed23dfeb84e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ea671934d4935f63462e233b16c3968cbd95f6b6a5c8d6fbfdc2c0a3615cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135232 Malicious code in lisa-kupat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078086aec213dd7b3ffa8c1a11fe2c9d60551fdb2a3c5e4e5d7159e08dfbde84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132240 Malicious code in bella-asinan100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49c15dc564aa3452be5c1bf520231e359fd91b54318ba02ead489997936e0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...