MAL-2025-164244 Malicious code in piluka-kaialbu-nunbai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c29f94b7250f26062c9a2922995558246233d579e027a1b6bf18d0ef932dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169979 Malicious code in uinsu-lotahmi-nailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9686ff14c2345f72c238f13efec571b6b3d9c49e2f87e84ce358eb33f6d696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145407 Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-sails-commitizen-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4f60ba37c31708e841a18d02c5a96f5764069dd2a82bdab58f42782883cd4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-zenith-configstore-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1190e910c0d9525842cb1b622a23dcdb6d56ed8baf21821891533ea0f4e2290f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-auriga-gulp-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b10127eb6bbd47a6636d78d2cd1db35c4ad4337006d511d902778ae0ca0b050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-proxima-lyra-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3fdc828d51ca9f29e59b72b62dd31866819155bfebdd1cf1d0c0c07f6369e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-thuban-miranda-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cd578c92fb754b5f403c01d4d166b3da8f76d699579c054b362cd39dccf037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-eleventy-aquarius-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce92abd6ed523d531c3e25190461a43f7effa31eaafced20fe4cda32b4ba9d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-kastra-procyon-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c77b2bd364074d4e5b2d077f512fa8b7cc09f21f2edb00ab0d1fdd4e81028a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-jasmine-castor-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ddfcaa81c5d467716db5e44e99c6e24f2c2417a0d54a417a3582fd20187a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-enceladus-antd-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e01f38b5433274e1e38e596e7713f44b9e706f3748c7005fb964c931d3bc238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-ophiuchus-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a7dc6fe75df179a05686ff8f7706094cb57cb476065d9e205db937812cd93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-jest-umbra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a714daaf767bc9fef0910ad4c37405fcbc88ae14e3ddc1bcb4bb91c35ab41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...