MAL-2025-155395 Malicious code in guras-kaaryo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9205cdf3ce9731f0fcf43b8e62876d215661640406da20e14c8c8eb13b3f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162253 Malicious code in nokire-akaza40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3ac6ecce4a39b9634a8c7c582db6dd5469f8fcbe3d1cbed84b323587a1a4a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168138 Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167234 Malicious code in teagood-nakama67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd7c756ddb845aaa5571e7dfb95673157f3ee3e04a84025306d6bb54f5276a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ican-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171ced7c715dcde4fd9bd067bf84941c1db430826383de231669f62ecb7a539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namasae-naiua-somaiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61336e40fa26f0dc2c7a58edd4ecc88494a3ef564e60f0324675f6eecfd3c207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163922 Malicious code in nutr-madsadn-syfahmuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be203e35669c5ff0eb5f8ef5c230a4f8515d1367f9b11910a7adf7e2546262dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7385b60ca85b2bdba74d1e409097ce53245a5380bf226e038c7a739816f680ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dik-vam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e8545149de8189bbe47820357501eaf5e0c33769b58a77a45dc94f3516bade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5db0be2aad9425ac3e5f3803e9b2a0fd155f08a8670b0fb0e56afe555b490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140885 Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141728 Malicious code in dotenv-parse-variables-nightmare-aether-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293766d85f705540910cf4c7fa5b34fed1ce2705dab395aa9b0d51f30ed0ce72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146865 Malicious code in puppeteer-slides-phenomic-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da10031c67bbfc99b3021734ab754a209615452308f5b508f54f13c7cbe23690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144463 Malicious code in lint-staged-pegasus-chalk-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c65b96b85ff686d1cdf5c755e0a2d632a44a975b46e822479027d76f97232a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-google-build-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e1026076b8776a5abf64629bc49bf72b89ae170bac59cbe6d152fe94085f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-element-ui-wezen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b726f17933e589a1638016068587f34dbd8f34ca68c975c0ddfdd7d9b38d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 383f3b0b1391bfd0c00a3d1e37ddbcccfb1df98f150dc0f63769832c19d0e281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146096 Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...