MAL-2025-155378 Malicious code in guras-asia-thai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60190b628dcfcf72fd62afbcafa8ffd4cf81aabfbb1791fd3bdcc2626d700fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158106 Malicious code in lina-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f19e715c420ee99b226d3255c39c9c320fed09744afda913af46066057d2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154353 Malicious code in diago-kalop-kalouubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613e0b5c8832bc2079499dfe126c773cbb39550d6aefd5d7ebcfa48ff9c040cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156091 Malicious code in ifargfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f646d1cb951bceb6b661956526982538e9540ecd2df401e449584841a4c4f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154269 Malicious code in demdadf-ncufaivo-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6566f16de0aead4d1abb1522c7beb82c0981829b2020b204ee35cd5cac78be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157707 Malicious code in kuinsnu-lkui-kagubumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96effd6fa666ffe8db87a250a78662d0954fea2d329ea8ca986a2c628f90e66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170098 Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-express-await-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15ea7d041f0cca0b7a08d87fd49356fb4638b151a0afb8bf2cbd8192a6f6718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-grunt-sass-loader-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0610d438cfeeac5446fc5869435a197100dedbc6fdb810df97d1eb3706ee54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144676 Malicious code in magellan-xenon-bootes-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62df206e0c637e4fdc9672598ac3b8880e4bfc6880a5cbe40eb17ad429a7520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142318 Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146623 Malicious code in procyon-websockets-child-process-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd862db44f15783dc21c6573311ec73ab09a2f68e999308370e492454719c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149021 Malicious code in upgrade-mysql-publish-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da9396522975edba628dacfcb027f00702370cb1940abecb62f565310e1772d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-chalk-commitlint-config-angular-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab9e2517173fa6fcef963c83bc68703e62edc8fc55653176a6511b2269aaa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...