MAL-2025-168623 Malicious code in tealove-okta44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86290a50118f79ed730c33bc928c9333f87680ddc894b5ba1ad9284f15a7ecc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155579 Malicious code in hafiz-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beed91a7fd7ec91f5221ca81ca07ed5c1f76814305b15c14dfadade8b68f4559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-lint-izar-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39e5be3a3dfd646a8309b4a091a11312fe296bc257aee1044700701d6db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-standard-carina-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471054d89f05ad64142e36bdcf6b6929a903822f04b7332f97bedbe4bb1a7c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-algol-websockets-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf4c271b9245edc7db96e560a7f0eac8b19470661cd7e26a2ea4f03bfba3554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-superagent-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-galaxy-aurora-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f293f054052487dd73afb9445478228a67e98095f859276268342d2d2dd339e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147993 Malicious code in slides-regulus-octans-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24123f446542f018aec00c753c2241a8bd907c303c7f1c2e60590391fa4644e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144484 Malicious code in local-child-process-supervisor-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4eaf60354d0570e14c670da6c5ea1d1394c86e5490ab4c7cedb36b6413f77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146685 Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-koa-nuxtjs-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e396ca676919a7d8b282472201332846db947ed7a0adcef9d8f0659a08b91ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...