MAL-2025-166648 Malicious code in syahmuda-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6d9b54f1d692b2ba37fa5575a5a3343495c9fc8de51b9827f73b8a2d67a65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160520 Malicious code in miracle-dok-ujaik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f7e5dd233875648908a54409f09fc9a060a14b1f2333ae9466ef2dac1ee6c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162716 Malicious code in nokire-kore29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7498c2049146dc0841650aa7ec80f2366d960ee8a2d39a650939ce1b970b8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-orbit-ophiuchus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95be8eae3b5267ee3a554f7dc53d936cfd1414b402055900c1bc3a8c763e49dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147705 Malicious code in scorpius-chariklo-nextjs-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3accdb3220250ef79e197b795a03b196b4c924a07d04d83687cce7a3762d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148206 Malicious code in spinner-playwright-geckodriver-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3609f32708b02f5163fb276f5c7fda98c95d96783b4fc183c215da71bb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143079 Malicious code in grunt-xml-mira-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143128 Malicious code in halley-alphard-process-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fd87a0b41ed17c1e8aeab77b69a49d174d403a417552c2b91afa0568e48d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141448 Malicious code in dactyl-native-superagent-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9399d903b38766a58790ac43991a2e3704dcf083ce309f85ffdf08a9046286c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-centauri-sirius-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca14a1da00800015fca446d7d09a88bfc7acac6b6e0fc7317667e1f503deaf6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-spectron-jupiter-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91bfa4b5df1c46dd1bfc2e3815bfe4db8d08c1fe68806f1e59c00c752993757a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f38df4dd9bcd623e077041fd6fe4147a12433ae157325ae3cc9a4cb9908c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-bulma-rate-limiter-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bed51eee8225c075d6770a50c8e2d5504bb307ce5e1444965ff85464c88460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148256 Malicious code in standard-markdown-pdf-lyra-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9734af3a6b4cfc3fe7e3af82e68cffb82ac31f0c0474818b7ab95d397e331d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145399 Malicious code in nestjs-magellan-prettier-plugin-markdown-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051241d3c5a6136195caa4925f68936f91d0643760a4e9e13cc48e4b44575394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...