MAL-2025-152160 Malicious code in akabia-aliguma-agbva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7842c0e2678b581c205199df0fefb75fdb31a07e0fffdf46b760c512b18dcf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160846 Malicious code in muklis-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1ade48fe4290b0f6e6e4bf4d743f0c59d7d0728912a309989938d023942be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150714 Malicious code in @miptaa02/iag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead6d0c948285531c20073b03ccdfe1b73f0583b1930b8913578346ec9d589da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156100 Malicious code in ilal-poke105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81387e2567899712f5ec3a64e942f0e4df55ff5bdc58a9cd1dcc7a7f594e6a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165806 Malicious code in savion-dsi-ise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618fbb3625a427b6e661a3c46c8fbe2cf27b0255f5023a8fd52b6ff082de9ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161881 Malicious code in nasrul-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce7a81eff1f09cb018af6602b90ae97c1754b9746273f682985102575d51e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156080 Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-comet-prompts-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504ff9d0a1876739fc8a79596b830b0a92c29b4ac7fa97d300fa5358b1419756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-sqlite-frontend-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00438414a1d05247d07d79b8384dbb973407ca000f4e44d02b9467d274865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-toml-transport-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f398e45e8b0671ccf4006cd3c34befd3a76727ed59619a175ee0f0d23d33fb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-proxima-capella-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c4e4e6eafea389b8886de6367219c50aafba5925e89c98723c039c522076e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...