MAL-2025-186606 Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a4a93ae9c0b359cf320351a3af5fd7016688cc60265a5c221a86d43cd0faad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biohacking-membrane-json-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb527aa78665f5e5cc9a4e92a1b7eb37e1816710216afb380826349014866df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-uyg-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83657f24b6cb0405a7d555c8808dff22deb015349084f29cd35d418d6993a13a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fiss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 275b30f3b683829e56472d37f4a5e0f1ec58b642c30a8e88558b97a974163643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioloipe-agt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e10e94d82929497fcd33b061af0d96000e5608e09bf6f82fdc4d58b8f8a30cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140248 Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e395f5c9e693bd8d3b9b14f983c17b082850cc075c3a102e6e0b88068e9b971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-rojak72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8fc65504d9fab4dc8ee4236baad2bd2ed2088c1169ca35cc1bfbdfa4a3817b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98857 Malicious code in outside_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f058749a62e7697ff803bbe9a999b715589c94c9172683bc258d9f2895b64fa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80660 Malicious code in prepared_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa57219dc1a850ab15162949b9bab4d7cf267ef3ce003ab3f18f6f79f5a164a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62376 Malicious code in complicated_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cb5cf7513abd9a302e357d6e6903ffba39e31adac9de6dd3b2271100e61b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59316 Malicious code in vida-taiwan49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0f1c6575cb3b554dd12ec3a89df224202f90e7f554ac76ff7c43022e6bda50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-semur15-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65b1a0adb10c478876b125a3e21ce7597c2bf90de0feeb76e0c49783d4bbf75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...