MAL-2025-169145 Malicious code in trevora-aaissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8717237434cfc807e49cc7c71f722b92bb1298c96692d5f949b21e4059500022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158795 Malicious code in lookingan-namala8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b68ea95948a91246ec4ffae008daf9ff20a9a34f9dbae9b86731bb77fc935209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150816 Malicious code in @miptaa02/masia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c06527ff2e88ea7978484ad3fc871e2483137530995eab6b047f8f0d87da6e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166619 Malicious code in syahmuda-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d159e93b8d47e9cc3ab72e6609692e90beb554296c3c743b49241cd50f68eb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145081 Malicious code in mocha-hercules-auth0-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0a8d0cd21f821220e7b075d93263b825737c0f630c3efd8dc80a94ba767298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143862 Malicious code in jasmine-procyon-capella-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d840f6107f0d615fde8a666d226e15946ccc996ec6ce8c0f8edda4a7b3ebe8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141693 Malicious code in dorado-module-centauri-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc48c5da0d6de22d1a878291edfa6b66e1ba73e9a36bab77ba8939963d3e8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-commitlint-config-angular-mdx-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728589dafa96fc22b16495fcaa1e4b6f0d89a044722caad1f849aecfdf5dcab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142665 Malicious code in foundation-aether-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d44ea2a5a494b6383705c3bfdd4225364b53e682092e07f297d14e116667c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden-teal-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36441eac318225462882a308b2d0ab959dd554eabaf3ee2b43be4cd29782417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a7cff724291031461ab159ba45bb2ac32653ad7f88919277281836ad9fda92a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-klipo19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f0072b69eaa1ca4129e4435ff569f18dd9c265b464d364e6edeb50bb6e73d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132231 Malicious code in bayu-sego67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8839f370d4ec5967785d3ad8454feaa3c8b928bedda0ad84ec70ef52ad1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136336 Malicious code in putra-rangi41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14b3c35b223b723581bab41b9dcfe1dbb7b1362065be2f1f1e3adf0899a8da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137647 Malicious code in utomo-lapis75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec15155901d4f0e8d4a9465e13dce8fdf2987e6d6ac53598c0600594921c4695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ketoprak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7171710757c26b5caca4d39a90c471a4b09ad07c64ae869e3a0d133c3f407db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...