MAL-2025-162151 Malicious code in nokire-abimanyu38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14642d3cccb8b1bfa89557f39f36052093c55ef0dd4e48c7490e6c37b7daa0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168997 Malicious code in tehah-miss-brew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6364e580110437bd7100fde088031eff414bb60eaf500f386dc6a38939cc3450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165282 Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167810 Malicious code in teagood-sukuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6c2a99c241c1393044c53d5ff87d7443239acbd3411fa4e2710085514a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168254 Malicious code in tealove-dana46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4e82de685f1ef930f61ffd4f5ecb0b56e5a02fe685a12e47d951f3d5a03098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164569 Malicious code in putri-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d31d89a23ee1df8a4ef136553ad5f9d89b266e54db0a9cdd36bb7f262828b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-karma-markdown-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2aa2e20a555341ba29c9fd65ce99ccd09df033527d93d3ac4e13a578a97bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124fae100d834ecd38af354ea48768894dc6d768b217b345c0026ce633a24f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-postcss-loader-enceladus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b7e1975ba8584db82d63f8d4ed5cfc113066d24a35aac8206fb73a8d4b315c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-kastra-public-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0360aa34680c5759781540e3bce6926c6430e3bece46867b0d8e180291181f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-altair-postcss-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6eb975ebd85eb737822873578f470bea690b69e9e20e9b55920f7137763132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-rocket-chariklo-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e00035575eab423ae3e4685949b497d9cc3dff7e8691dc1a9cb608ab0565d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-google-halley-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4386b673d0345f9098810f5fc8d9358c549432be9c1f07dc0a24c3c44911e963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-vega-hydra-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe645bba34b0e4e8d58c3cecb6d63b49c6452156e804d022ec335a18e9eac1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144286 Malicious code in leda-prettier-antd-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43466b1e90ff3b3aed8cbdc1dde1a86542af225d18ee73ea34de99f4f4ec5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139731 Malicious code in auth-tethys-duplex-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5118548c8190c3f375c9f5128d029bf31797ee6cf9feddc4180b3f4efd440584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...