MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-json-sync-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d7bdf49f9f526990d16fa5fe2b84526a9d322ab85095c3fe1b1c70438820902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-phoenix-prompts-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dbf63d6475ca1bed3cc695752f666b267fc1e3cd535f07dfd26419bfd634965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146441 Malicious code in postgres-neptune-start-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e313b6f9d33429c95c9c1d346a82c5c092d01bd5405df768c5b3ce038bb232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145530 Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085d08b4a312af876cb255394fd3e539ddd9810f520ab1e0ddcd5f772c7da412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148298 Malicious code in stop-magellan-uninstall-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4332253d3795a105d1a7b3111ec0d8148ac9825f77ce34c45ddce4f385d69aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126468 Malicious code in fauzi-getas46-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede07487b9e3f3d309a1134e1716afb9f15a72def87f02f1bd8978c784df63bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124842 Malicious code in adjacent_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029eaa86ae0ea2aa911cbb0a0bc68adc872125d6d36a1d48b3cb3b314e2d3020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120176 Malicious code in galih-keraktelor36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cceb4893c4c10b38dd6fed4a04e73fd0432a21582b211432707f0e21f65c02bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2320f2a6958647cc70e22d2e261e1bba51655b0a377ef9bfc9d2a9542cb090be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc9fa635cde02cde24641a974bcdbc18094c9d09b2e51b2cc5ec278e54bc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103619 Malicious code in healthy_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1769e9f5a5a1456987cce0272f639fa8e552651395c7085e03ad9ad17559f2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100605 Malicious code in close_buzzard_black-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf7e7b4ae773bef2c428f7ae490f721e72033b00e33af35a5adf60c43a5ed13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bbf601992e48ec818418f456957df1c95a0503176ef375718ffd27342556ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a0ed36dee2d873234ae27abac22065e289e258e7b0359826a8ea7c3ecf5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109325 Malicious code in supposed_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d9836a314d01275104b4b82e9b5f1f8826646fc0c29a203887d777ccbcf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105061 Malicious code in legislative_rook_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59983eee0086cee7ff0a4af7f31d6acaa0e31f6e5ce2ff92cc38441b122913e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100957 Malicious code in controversial_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93338cbf813da06094571f3b409c8ad41262ead0b269e441aca4a16ae428a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...