MAL-2025-167553 Malicious code in teagood-nalikoli142 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4150be0c1196f55e46cecfb36a4d35a01c75fea46f287703c9e87ecda9ca410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168043 Malicious code in teagood-yakuza81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed2aab7e0d8142bb18f90cd24df8a532c18f0601c626546abe146f3e89651e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158867 Malicious code in lookingan-namalaka54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc15d123bdcf6cdfece8647544647d9bb99e48125b83e17d4b2bd2d74522fb93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153396 Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166756 Malicious code in teaadgg-musni-miuysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663a5c0cb046af05325a3589817af87c1c7632d20bfdf5c82603ef1cae54d92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166704 Malicious code in tea-osss-tepanid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81b46c738224f56954bc3e46b91b72c93fb31e200df3ad63cff91f942d01e917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156126 Malicious code in ilal-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f2a1fc837a15af104252df95a0c3eaa46157e04ef709dfffcb9a5930444791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-barnard-selenium-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d636fe8e5472750665c3549099e7c1323370a7f084de4ef5aee264377c304ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-despina-markdown-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4180b6a4826c11a8e0cd2c21acc90130fd2c3b5340cebf4dd04047aad34d46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b262ab41535744cd75ba2de51356f96f98aaba5eefa0ddac512e45ed9ec33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cbdad42f05ae6cec01ed8b7b3e027c1b1386cd3c563a1ec7aeef9f8f1e1e54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-eleventy-sedna-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76a53b8855f0c1929c9ed27e787320d21b2e4df8ca1a9760a0f6820268bdde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-telesto-equinox-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de1350f6b3fe53b352c5f1540c2f4c83adf90f698ea739e790969583955c89fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-request-server-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32582146213f4e818a6adcaf53f077494be4fe9e9cd59bd6c4429b5d32381c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-callback-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea8ba295da82ad1827008afbb037b09bcea5cb007076459638f4ec6b024ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-dotenv-safe-dagda-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8ba717fd5c6b3fcffc08374d7aa12f6de3997f589f03c0f2545e229aa89dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-registry-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721081aa1d483891bbd09014143becd91e4a4aad2f1cf9b6a947fcdc5e8bfe16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-kastra-lint-staged-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14251e09c02fef4bacf19a323b84b837d727b1fca4158504f2134a130218bb94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-io-thuban-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91e81b30691489bb6dc1477cfaf24ce6eb3eeecd6f57a6188f5d9eeb9365266f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...