MAL-2025-186583 Malicious code in development-webdriver-mocha-leda-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a10d7aad60a2f75190e5167927d0fc96964f474c27b6dcf3f2941dfef7a2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180913 Malicious code in teate-thy-sonic-rukda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c788abbd7effb9ea80dbc2cf3969097de3a77a8575cf7c30a2bbb3c5bf64a993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175262 Malicious code in kapvino-socvni-gbfafaibssoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05de146209557d41b0cbae49a82b6356556b43490b47e5af1e04ae01aeecd7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ayupratama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0055bcd046f53c88c8b34b92abb19b7be66e1f4fb2c32b5cac9a321fecd551f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa198796da64f836b6d7e8c9fc85dd0e669ade1a6bb2ffad30e50d431e07251f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75da33d9f53ea3d7c5991a1239aba0b31a950d50cd249deb223bf5559a5ff9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-gagaa0afhf-gafsafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17630f10176f7b53f14f0e26d41236f74106d95e82e18d47bec41b864f7b527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167160 Malicious code in teagood-manaki90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b306cae7a67448bce0778b09435c68f134c42c64101bb942a8bd0d396245258c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161214 Malicious code in nabila-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399f3d12fc48e5d1b562cbf97f39e9ee7d31a99477f9a00dd868a8f525c48f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168195 Malicious code in tealove-coki38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a9079924ea611e55ace16ac3308f314f2e5543f49a3458dc6903af8caf63d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156899 Malicious code in irashi-s-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff0793fccbc81cb193ac92a29c9011acd36c7a22a6042ca75a033d6a7704e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155523 Malicious code in gurs-manusifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a329025cfa5e66eff8a526162e55ba8524fcf6bb9fb4d5bf997847b6c50ba303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164952 Malicious code in rita-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50b4cbdc3fc2f3ddef9745dcc1b1935452db34328cfa924f0b31bed00672b50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-inquirer-hapi-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7be58eb29f37467c3b6cb8c68a63f2c4c96a8058f7dfe17628c5e644ec52db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-optimize-css-assets-webpack-plugin-rest-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed231565e3338aa8626ca1637eb6b49c9baf56b6fdbef376341e40787295a7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140964 Malicious code in commitlint-config-angular-global-dotenv-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0be1e1d6e170b61cc8ee04047225ecf8b867e4a7aff9a05bc72b7e10f77f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144554 Malicious code in loopback-jest-oberon-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9588f90e10bf64967aa7f309ba0dcf4a06281c54f1ea051fd212c29556caaadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147430 Malicious code in rigel-bulma-mocha-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4d1d54b8f25c3f3912f8fe0efdaa4779ce0fd2a782786d350f986a550ed31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...