MAL-2025-164068 Malicious code in parwo-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0556e9f24244c3456213908a3c03c2d68b212d54cd850259a4b8e49e6582595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154501 Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161613 Malicious code in nabuf-otoimn-igamofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665eb1d60b41dfcf78a437d5b8a805f804108663c273e932325aa4e7e5caf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168577 Malicious code in tealove-nokire48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178231c2a2821d70f902b11df8715585e8ed616519e4b445639afddd7bd7bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168086 Malicious code in tealove-aruma30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c70cb89ade68eb85c823b512537cd00eeacc2362431d4b266609cbc69ed820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164571 Malicious code in putri-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f0a88b5414c80e70f59d1818405bf5cf785d6208094f3809062938be1d272e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145300 Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-blitz-nightmare-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d5936815c3f7fc7fa7cf85c4097e6689d8d83126c8007b5f525d2c2e31530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143978 Malicious code in json-ophiuchus-jovian-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149365 Malicious code in webdriverio-dactyl-node-sass-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82883c4820c0624706b644e21797994f6a8e2cd33da1ec89e6da0d2cded544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145290 Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...