MAL-2025-162941 Malicious code in nokire-loklok83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c8d7b13449d3235f07bc6a9502fc3fb950f6eea60316b8e3d062c0cac25842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157933 Malicious code in lala-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a4c2c1f39b7c391003d20318eed1ec4d099aabde7784971fea9292d0106bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169278 Malicious code in trevora-cir8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb0473a519da071054d9631383e12a0439e953ac5d51c85de37b8008119523a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151916 Malicious code in aibona-moile-arom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd474deb61f50984268eea090d5ce8da4764043549e9ebd1f5a91db5e2d992ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-pino-docusaurus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683cfc14e746e8998888746ec4ea2ac14ca8ba402d97fc8885f45b80032fa875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-phoenix-hermes-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f13dae0a6b9099cf69f24f905c54a9e0d5e3b7825909735087f068e4787d854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-gulp-quasar-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ec1782fd94cd2a052595c443f107e56f998bdf4ed021084cc0ac67e769f89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-axios-node-sass-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959d8d576958513dda3a4a22c896666d9171800c8afa95a1998ce213cfb1a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-wasat-charon-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146704 Malicious code in protractor-zenobia-npm-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fffd5854a17d7b9cefd4422eff7eba11b7fb2eeac2286356ad038845500e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147634 Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e0bc5f74d9334238f6e4593bc4bbeae0f83fc66d8a18c2709882e19e7a5326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147253 Malicious code in remark-meteor-leda-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba70179fa671020e8e1ec091d1f17418204aa9da3170160559b1468c152ee42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148541 Malicious code in terser-ursa-cosmiconfig-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6488da569c06a27b6cc352b7d86c2dd028c9e589293234b9019272e6a3c92805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146457 Malicious code in prettier-blaze-fusion-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdcbf834fd5bd130e4eaf0bb91fab61f3b682624b752653a4f5ec1cca458e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146782 Malicious code in publish-epimetheus-redis-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe3501ebf5ee0e9d66130ec7cdd596273f343020bfec46601162a249a5ae585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146939 Malicious code in quark-toml-iota-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c32721632d64f23304482bb6565212889262dac6c7be4198546fa527e9be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140839 Malicious code in cluster-virgo-octans-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd872b8728df89a1bf3c4ec57b4ae0ffe5edf56c0c2116d6270a69db9bf2e4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139975 Malicious code in betelgeuse-deneb-request-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8764e4fcb6d47a864d8253ed1edf3345e21de2108d51e7d97edb476081bf9361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...