MAL-2025-153959 Malicious code in bufpani-muisyau-fanau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3eee9c8a6ac2ea1bb5545cd39c577d413126c99bc948a000e3096d2f6e4a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161543 Malicious code in nabuf-otmbian-nuyafgidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7016022a4b6d6bf8634dc1db6f33d191c67bd9d35c1793eaaa345b41197b9ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152764 Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164902 Malicious code in rita-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51144bd47256cbcd5cf48774d43f5923ebb05f9ff0aa74997316d70f6a18cf2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164172 Malicious code in pilka-lniu-kanuka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57dd5dd30f2f91c409496481abce17a0c64aaefc118d6a2c84315c3fc58db411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-geckodriver-thuban-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd589d310cc6a2712267379d31c495e64bbcd970dfdff92912d57032f89721f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-cosmiconfig-hugo-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4f594b558f1dd74bf1202360e9678c1faf4b03a2f37786fa8241c6674b6b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b8b360a5dadb05d9cbb10f9de323e7fde5d751877b4f12018344d078f414a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-jovian-prompts-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adfc21902cbbe288d44e67e91822e196ee14eb461970003305eba5225b5ceffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-ganymede-meissa-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0c01666a92cdf3398dba5ae53b375ce14478ed631928b37880ba1eea55e208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-soap-colors-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d26fcbb86fac321c2a89996c3d3a5ecbae4265c62ca42ef3fb425c829669460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139244 Malicious code in aether-transform-capella-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70f2d60a13993377e528418f0db8de40d7aa55bf545f564a55617bf98ae6366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148004 Malicious code in slidev-duplex-polaris-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb146b0c2ed00e687cef5716206c265a7be0acaeff3082bafc48c1e54e8872ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145548 Malicious code in node-sass-mini-css-extract-plugin-spawn-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2940744429a3d05589b66affeedbda6ce1cd9484a8fcbf4e5eadc7dc1b2982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143683 Malicious code in install-rollup-spectron-webdriver-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b87a63773c1d18b14d52e160f293965fd63500d697a8e92f6a0d82c70e757c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141270 Malicious code in cross-env-sails-pino-pretty-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff472b53ca019f8b396f192549d6ea6ac94ddc96058c84452a9ba0390ae1bc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...