MAL-2025-167609 Malicious code in teagood-nalikoli53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1374101a6af73d4c0e6e6c595f6f00e2927d8586e26595fc59ee9cf1541efd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156464 Malicious code in inal-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624f8befcbdaa3c0065ad04401e3020f13600ec60eb2ec1e6248f1840352bc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162998 Malicious code in nokire-nakala45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253a15d3dfe8dcf5275a2220a9d90ddd38e217bb4d3aa9672df2c5a81b76f337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156872 Malicious code in iqbal-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36dc66f537ffeced74f1aaffce8798690230a2ccdd327e9dbd9bcae949163566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163595 Malicious code in nokire-zenitsu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea2ce0aa0e345e521dbcef9047d946bfbb930294f8f3cb08ebe4bb620637d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161531 Malicious code in nabuf-otmbian-ifafonabo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d295266aff4e29a322011dbf45bf3ee55e21d27e22ef90ce1fe3ff8538a55a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162790 Malicious code in nokire-lokcek36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a096284a12a6394a6a1275e1c09da0f3dd323576617bca2b4aabb67bc87998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-meissa-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755d7f15634447caff195c0e42d582e0510b0866ba8351f28fd2b97db8b87d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-nightwatch-zenith-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fab1d6691d3074618bc6359a2f1daffefbdcb0ba61b346866e881966de2a2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-config-prettier-plugin-markdown-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e834e497b6d587ec03ff3266acade36150e5844f41ba3cf81c5e4d8bed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-apex-spawn-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71e0a1e9cf368723f79a82fb82524b86d059fa3abe85eee3b94013aad9171af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-schema-nightwatch-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02fb466e8ca9d678f6b37b895e5922e2d185b269f83992618d61b99e4e322732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-protractor-jekyll-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695493b3d3a25ec6a4970b545a94e548d35ebcf37ce9e8485aacf02283fc80c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7935d20d07e495cdcbab1cc3dda880187161dadfe8d56c02d11fa5e642119489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-blaze-rehype-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6241065b09716af75551dbb5e650737a8310ebea79da1f6bc7c1d4c078ba7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-babel-npm-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-barnard-resolvers-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea66277b18e096e1d2a0d7d62b31f94cb16b2d90a1da10ff12c28b7a3942e44d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...