MAL-2025-166204 Malicious code in suharta-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95425fa8fa87c3acfbdc41744f260cb2c926fe47e4d820d8eb8dd4aa0c3a5dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169732 Malicious code in uinsnu-lotaihzmi-kulnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f97c00f0230559234346d54199d04baca0758dd51b34aa7a009ad126497a0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162472 Malicious code in nokire-arjuna58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800fa69e9140fc6f5da8632850e8fd2705b0b7319a4634ec3f418bc1caaa1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-iota-pipe-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6704db381e370c13375724452840d7934ccdd42b0c11abe9e9c9e1356ac4777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-markdown-process-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536192c36618e27ff8830d058e31380e4431d9840dd8c3106a5eb2f8bc58953b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-indus-supervisor-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7167ec4027a880062b47db9272dc92073a5b9e1998a4a8b0d5136ba3df69cf36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-element-ui-aldebaran-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe35319a0e1502f611d4adf34672070439f01d604657bca8167ebf2b2aefa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-jovian-proxima-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20db91cb07ec445e3bfe9cbf459d7d84def7257f90e35fe90660aa5e805ae350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-perseus-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b8b0a923dfb3778323f2aa7e9a296eca4f85eaa61df4e5575c5a388aa02f07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-fetch-flare-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4e98e20c61d5c173d509fd0efa7d781ac49aa4774424b9740703ed7156b521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-europa-rollup-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b971b635734164859f470126e1df9acbda4112807b2bcd956b710fd2280676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...