MAL-2025-159902 Malicious code in mansioda-noda-mufngu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25af94d03f91c60dd510c099cce6300e6f3dc0aac9c11b05961a23f3eb46e322 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168311 Malicious code in tealove-darknest7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d246ef6ce551c89f999c2d26f395f324918c0c1821dafdd5b0b95ceba3d4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157260 Malicious code in kamasada-buysada-dair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f628946e4cc6aab883bbadf0eec72282709463e74052384deda938a25e5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683c314055f749f47cc939cf2776e6c3e3cfaf69cdf8d9f3f43d8cb4365a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aimaku-umuialakdasoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37ef094edc346533988ba7f156537d187fd844740853409c001e8880e6bd784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163947 Malicious code in pajero-cir19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643ac7c7c1be5c42d3877807760a62294ff2d4ef51247274d5105caf50126873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167434 Malicious code in teagood-nalikami35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 882cfced14cdeafc848df927c3c685446293f66bff6c3b70ddc24412b427f1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-cosmos-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35bcc97047b629dfb67e111296a3dd5abb69a9c51e03a51548ab42d6356e942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-google-yildun-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd3f347dd7bb4ad386fae1733a6954156c5ca860200b6c24d20e396d0a3917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-epimetheus-redis-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe3501ebf5ee0e9d66130ec7cdd596273f343020bfec46601162a249a5ae585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-foundation-mocha-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4504dd92274555fec52a11e4209f610f222ddd78d1a95312070a220335e6d8d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147221 Malicious code in release-it-convict-io-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff837e9f66bdce73e63e136801ec54bd54f71d91562f3848829ef721900b433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-neptune-rate-limiter-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fb0f24eab897236a8f82e3344699506bb8f68e405e72048c7db8a045739259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143971 Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142745 Malicious code in fusion-redis-transform-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca2f562084596430846a1d0703e28b8df04abe7055c8146527b1a06f37419e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...