MAL-2025-187269 Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207baa0abd8ece63fe60c3b6ed72245a1fbd0ab7acbb419f0f280f5e15470fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imugay-avg-ijimaumfaagf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05585775081be3865ed78608802ecda2707f34afac2a9bdad1c236dae06889b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab9432c4ac98d57f8c08edcf7f802ea599fe5d019add52336dd3ea506291b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b0f6e6b541e5e82c51909928caef30310b206438c7b01afc5fd2b69e057f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aysali-aais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06480252208531d5b7f15cc0c57eace0249b28661dacd00da2bdb2180dbc12a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namada-kasito-nutro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 469707a92f7f1415f2443981bbca6e84654c69b89ffd5a5ca48f53879bf235e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanctum-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c13e7a3649769826894e42c234435e476bb134c33d36be73a2cf69544e1c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-auil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd7d74641ffa7260182cbcb9386f31611c4859cfe496916ed98ed0b117971f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169380 Malicious code in tusaaya-redd-wfesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af5877c8e68bbf41e7ec47cb8ddd7a1d10ceff55e1f228fe7e33d3b2d94ace8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-leda-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ebc3dafe421376c8a68b4f99a070c82d6b07785161a4d708ff483c04935e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149520 Malicious code in winston-pino-pretty-parcel-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf34adf731cd0173b3fc913fcac4763e84f4cc5b9fdc9f8f64557546928e3e63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143055 Malicious code in grunt-bunyan-convict-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0be9f17a0f8f2b3a4f62c63c7461b5adced413836aa1b4f216201de7a4d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132132 Malicious code in ashamed_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bf9870c0ee1935d55e20edd4ded87ab78d780e0dfd5cc456cb40f1fca278cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124365 Malicious code in xaver-kemplang33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681347895ededae72c486bf41e64b0bfe2c8a77a4ac1e101ce7c38290e6cd2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-naget32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd9eee39607b9f668ed7b41b6e6855e5c70532574d93f87757bf5a134afb5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd411540d8838d47d9a8fe7973778f7c7fe2d65ac53bbb267bdf54c5c2e9df49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114059 Malicious code in fluttering_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1256828590832fa701138f90c3657089461f870d6a3d60828e951bd0ad926551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116262 Malicious code in oktafian-kemplang33-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb28446925cf4dfe800887a9c812046c8428488221dc98b2957fc0c03d236ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_dog_blue-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51332ef3cefeb68bd246059184e1a9be6a35b74ae5b788fb38109370653098f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a255d728bfece76fadc31ed25abd7a3047bd9d0402313c78bf375e1b839d7473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...