MAL-2025-167187 Malicious code in teagood-nakama23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6de13af130718f5112c0456bb876a727f74d236b86a27560c2933da2d13f859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154901 Malicious code in fadila-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a966d29efcede8282ec9db9e08009bc28958d603e469d795f88a232f98f9a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168447 Malicious code in tealove-nanami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9476a8f6f912f664bbb8b08b2f5b9da8b0032b75bfa0ea1e78df062e32f6fee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165328 Malicious code in sabua-muhay-natufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9cd2e3d38e97cd3b8e465cd644c26d03f99d364c0af80047201ded636ac2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169700 Malicious code in ucok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c3f23bc9b8dfcc4cac518721eb9ee2493fc97328a32cab433bfb1c1ad8004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158420 Malicious code in lookingan-nalako12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f65d433866b50f122dad06dd4bfa70cb9277655a6cd06a93326e9d95e254a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-impulse-event-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0977a44abde184dbc3739dce64cfb2eb95d5e7cbccea10e59d54906046b6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-version-standard-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590520d16eddbdf943ab99cbcabc3f81869493185964f9727b048f57817baf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145806 Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143131 Malicious code in halley-castor-less-loader-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d184b9279a477b2e66964b4dd26164f603b730d6da0b7938958256ac3ec68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-jovian-hugo-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c6f6096489737ed111c3532cb37fcda467209476821719e723cde5cead77cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148231 Malicious code in sqlite-loopback-iota-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3537583281260542aec1d181c825c2b58be90fd7d1ec1ec19952d1f37150fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140162 Malicious code in buffer-mutation-changelog-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e6b39bd12e70f7e32d3f9df10e9c2f4c51ba4b5212e46797a8d7d6c521b505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144072 Malicious code in jwt-figures-ora-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d01d7893c541cee3e42f365513a2171568f4818971fd777e268fd982ecb98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146636 Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...