MAL-2025-165739 Malicious code in samehadaku-tss-sur7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea0b8ecfdb47604abcbf0360d86f285ced7ded43e5eb80e2e18d71b02d34dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162442 Malicious code in nokire-arjuna30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146900ddeefefb8d0c4a31b2780eaadadf638664675fb272cc301d352a06415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167337 Malicious code in teagood-nakamala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4096cba47582544b9bb70a6bbe0818f994a4cf9c36e52ccfe1ea6811f2bd3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167550 Malicious code in teagood-nalikoli14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042d340bbd4cfcca80ad43cc513dd8052ed8ff7ef90f23ed80bd7bdb9971f819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153518 Malicious code in avomainah-fragis-oud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81750c9c33cd70073dcac05a3014d0bca48ad6774ddc7576f86fe0bcdcaa13b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-commitlint-config-angular-nightmare-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bbd5ec713b417d71f3839bd529b50799f4c5af817589800d9dd2cf98f550a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-antares-geckodriver-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4a23633e8dd4341205570ff944f50dbad00022a4bd0b1d7ba92d0e3a6d8922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-ursa-upgrade-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-antares-altair-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1dd19c2038ff973dd2b4ea0902b25852272ab1db03e4ddefba38fd37d87ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-nuxtjs-spica-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14c6404a455bb29d3f9893290050e6e8982e6a5dbc7c9429a4f25827345da287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-sync-aurora-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de322dc14cbf09d6210fe4f1063f229a8881ac8ba3a9ed3a70a31dd85cc166d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-nconf-ursa-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6c388d4d528181105b95e70ffbfcdb98a70dc29eecadcf4e7ffbd9fc7966bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...