MAL-2025-188560 Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188534 Malicious code in paleontology-lyra-hercules-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6719be20e59d8b45e65d841f7ecb4762b0113345b1250aca102c4a5cc12ac0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189208 Malicious code in resonance-middleware-octans-graviton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970ca8ef6e7f17379376bad34acd43e416abc3403acca977d152258ab4811af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/biru2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1851daefbecbc23f3bba9a063c72fab4d264e93ca6f007b84de56f07884fc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anais-papoa-0paufafui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff966dc269ebdb4666f03db51b335d8479e7d023e269ffd554043a5e60805041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180031 Malicious code in nitroteh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1681d3b1f8064764c55683def19712c3f87f5d1a33ae0056db72fb3f5ff162f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176131 Malicious code in miftah9-miftah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c09041a2e7c54ff28a8bfcfb5adef7259065258fab54b9fc3ac8f05f724a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0020e4417dfad1edf552be665c0e7bf4757cbff467957f35fc5ac613427556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171709 Malicious code in padraigbyrne (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897d910233a4f660b006db5156aa9feccbee44cd4953780c49b5bd4a71f11169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manapf-manuta-mansua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927688deeb08776f735e5f6c7ac8817b6e7658719c448c539d9be2302f79de7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03d72b26ff1b3f023d3f4379d2bccdb8d27e8d8c22a0ae59e47e655b216e658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166166 Malicious code in suharta-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6cb9277a092cc6b05e251fa105772a11be7e37711484a2fffdf2f44277c329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6227c99c5d3b0daa1a16b8d0d74198bf8e15581678d91492b3f7e58e7663dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-postcss-loader-non-blocking-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908ac57851e5eb2a493ddb3438f9e04e69b5b2d95cb824b69490b1cbee3ddba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-auth0-firebase-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d20ea5f8451b4e7873581d84782fcd1bd8d4215b0440c2e223c82b0e0c65f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-vega-mensa-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bffbf8007d94049e42f423a5ce3b85867bf4f4ef2b815980f800fd66b40defed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-weywot-xenon-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9067243135c3a1d2c24a2e061e3cf70ce446a10f71d45011eea83ff5d197ffb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e3964112f80ad2c6d332024bab7a4a7caacee2ff433a9b5d5ec42ab60f6849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...