MAL-2025-165884 Malicious code in shilang-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de5a4767e519280122cc5f26f36fae1a0039f6a858ecc05c9c5f81f704f3c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156675 Malicious code in inufgi-gotma-anfugataz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98ec6cddd1f9cdc6ed7c950f8a102d20ce0aa7547626b9fbf022d49530098c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168293 Malicious code in tealove-darknest36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd5199e48cc6edad6b04e699e386731e5c1bbe65a5b646b25b1859f5040f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163202 Malicious code in nokire-nana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101f2aaae051bd5820defdc1edc584203aabb46b449c4b164fffce7162d2552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165804 Malicious code in saubi-nanliui-iuyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9933ec12443a5fd6480bab2b3c8a1341bd0f4d3592517895e8f357fba1b05e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162389 Malicious code in nokire-arhani73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5b29e0335870cbcb3c80ddaeab015e4ce013fc1c1f42a3926edeb479839516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162436 Malicious code in nokire-arjuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcb84a451f990171fb383523baf7f7c195fc6d25b1ace9a64d97f68d88364ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164578 Malicious code in putri-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed7902c9775499b9f3b5b164844ac748c1b6ce2b2567b77a7cb1a75e5bc4703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151431 Malicious code in abina-mibiian-upamumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfde9531458c2c2f865acbd3a7558e02c4f903cb7d6fc3cf74956c03debc80bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-toml-transport-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f398e45e8b0671ccf4006cd3c34befd3a76727ed59619a175ee0f0d23d33fb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-backend-bootes-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d478dcde22ec2327defb9b0c58a5a62631639752144f7df308808fb78553b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-dactyl-exec-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e093d0cc7d469c010330f2fae3ee59791663210739ce726a1470a5457e8ad63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-ini-zephyr-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605fe81490d64b2c1a772699d84c2999f71b970b02bba2e93361a77189f5dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-comet-prompts-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504ff9d0a1876739fc8a79596b830b0a92c29b4ac7fa97d300fa5358b1419756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...