MAL-2025-160368 Malicious code in messi-turah-tungg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 687fe1b7613c3396238683a02d5adf69570cbf62ff9cc71f3bd5dd2f4ff4c9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150889 Malicious code in @miptaa02/query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed15cbc33db311ab1a3606c7395a7f0caeed3ae7c49d83ff6745bfd643640c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169629 Malicious code in ucok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c61d70efd2a55d4afa3bf1e6e59e0ece522455f0ddd41d026b9da856bf2837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153912 Malicious code in buatfa-buaat-nagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b9a274f44a2dd6314a58ca60cc1db7fc951068f9b48576b1fc5fe05095641b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167222 Malicious code in teagood-nakama56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89093b338330b810d43702eee758b39fc2239170f60fbf3eef4b52f3cc685365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145234 Malicious code in mutation-telesto-mongodb-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d88d5da820ec71695787b9067c57f839dd6f8d9bf7a796481527698196c2020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-development-meissa-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b0cce58ca27bcbee4953b748ac079795ae9012a13e66e88460614385e7f92b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-perseus-lyra-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e87733bd5fd700c182b2fe085a507461f9325ca6dc4644112ee05a9b4d5f99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-tailwindcss-cz-conventional-changelog-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e92db7dae7fe60b036aa01d617d1fd2a1796d36377e1bd079809b62a7add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-mensa-build-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd565218ad210ae83638b08826afd3326949158b5c7ad8415737c705310ebae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-winston-schema-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fac4ee9fecd205ce5a6a0d6f2d2fff5c73dc9b66e1cfa9181d4316724a6a246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-rollup-plugin-pino-pretty-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25fe62b6fcf916ddbab500c08a99898ec65b9eb1a259f6363bd0e30f51ffaf86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142601 Malicious code in fork-update-stop-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5331a6d75858fe3170dba64a50135d689c71f8234b42cf0dc3368ba3ddfe1234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149485 Malicious code in winston-changelog-dotenv-parse-variables-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07107ba7dcac3d1e832e3cf8b57b85c3fa17c4ebf3a3f8690276f30a26886d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-google-polaris-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0301889cd3284c9ff6e51b0f6cc4788055d9fafeeaebd71b19ab0eb2888869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-ivory-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd790877abf20c0be41145737c373e5e0c49bdee0530f9deb3514e20fbbdf7fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135195 Malicious code in lina-rojak70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86099faacd31a8438f9c683ad22fbc4d4f647aef84f1ee7975867244832d5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-asinan31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7808529f6ff8f0722641419df70921db7e71a533a1212b90d79f64a700e297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...