MAL-2025-187253 Malicious code in gulp-oberon-husky-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75617fbb11faaa49b53d3be3e65087cce1580f4404bed0e40ed9913bed877bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99e8d931079d4450f0851d04c9e1d1a1305994dd874be6d31015c0014c6e5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171153 Malicious code in emilyturner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe448df04c58920965956732eaa24fa10c546bfb2fe30b35764ac49483900f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5cd5ff060a97efaa2faba6d3b89b963fcd3c4dd868d3bbe4066439de6f4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc47ad2baf5a6cb27061b2b9cb30cb71b05a9f869493f2a6c736d06b079302c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-nastia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e7406ea9aef30f37f9fbe7afdacdc9ccacbc6ca7adde2e225f40ae3c974f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139915 Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-protractor-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89acabbc64b72fe317f20ed366b5d5b06f22a3e8ec4cbf3e386d2d07b44a392e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lacerta-tethys-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daccd0e088b4d8b6d010fe3e21d6688a38016b3fcc3e89bedba46662a99af354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aaf8fcae83ed22c3f6c975f6c59b0130618d34d943fdc30cb21002218e41ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rawon63-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d3d4dffd0b7ae3031dfead949d2e2d3658eccca943e321ea09b34010094226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94330 Malicious code in exact_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6685199932b55ebe1d51a1a350dff6e3dfa241cd7ef4a76e848c1ffef68355e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93f214391b654f601c0ced4c92ef67945fff3368a6daa677748c8a903609b360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85126 Malicious code in erick-rawon3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b16e1b2f143a108e723024c2e2ca59ab16114d4d727fced92566a7993ad494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-getuk51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b23117b297a1cf8fcb086dc1a6aed55be666abcf8a5f14521298cdf13ac4cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54583 Malicious code in riana-semur11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49a72302288f874443032b5bd01deaa651d0566d9aa684baf5342dae55e867b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-51288 Malicious code in cici-lengko18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b4b28cedf83fec1f38cc7269a7a0e8860053ee519c8943c7cb564b56cb3551 The package cici-lengko18-sluey was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...