MAL-2025-162536 Malicious code in nokire-genji47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be48bd5ca764d570a523808d47bab10760cee25d612c5ee6966f69b6ca7c9c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150411 Malicious code in @mipta19/riscde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6498d4f347e822263c674e76322ab7ba48fc58dfde2a528d299e10379a24ed97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-lint-izar-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39e5be3a3dfd646a8309b4a091a11312fe296bc257aee1044700701d6db189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-standard-carina-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471054d89f05ad64142e36bdcf6b6929a903822f04b7332f97bedbe4bb1a7c83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-algol-websockets-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf4c271b9245edc7db96e560a7f0eac8b19470661cd7e26a2ea4f03bfba3554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-superagent-google-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-galaxy-aurora-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f293f054052487dd73afb9445478228a67e98095f859276268342d2d2dd339e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-antd-local-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c86117e77ffd0d2762aba9be413ca8dd9a6ae20efcac1e83cd70d63b05b6ab7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146685 Malicious code in protractor-event-meteor-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b5466457e913232044e97ffd8f47292ac4c038ca9675f86cf57212134a556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147993 Malicious code in slides-regulus-octans-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24123f446542f018aec00c753c2241a8bd907c303c7f1c2e60590391fa4644e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144484 Malicious code in local-child-process-supervisor-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4eaf60354d0570e14c670da6c5ea1d1394c86e5490ab4c7cedb36b6413f77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147405 Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146909 Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142004 Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...