MAL-2025-187253 Malicious code in gulp-oberon-husky-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75617fbb11faaa49b53d3be3e65087cce1580f4404bed0e40ed9913bed877bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190347 Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tunis-kit-bogavoaawi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99e8d931079d4450f0851d04c9e1d1a1305994dd874be6d31015c0014c6e5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181378 Malicious code in baso22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9f2fa2a7b282f4e59c3a3fe7776ae5fed8d90e0a96ede764526f2a42c232cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-rilev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c43933c2028a475d8c682bf7fa73fc83a4043dc4822b00ac0c5fe774685bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakao43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cf78672fde4b2380d32485523fae268a0994cde92f1604b1fb4c3cb7310f99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171153 Malicious code in emilyturner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe448df04c58920965956732eaa24fa10c546bfb2fe30b35764ac49483900f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc47ad2baf5a6cb27061b2b9cb30cb71b05a9f869493f2a6c736d06b079302c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d5cd5ff060a97efaa2faba6d3b89b963fcd3c4dd868d3bbe4066439de6f4e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-soroiadadi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1132b986a32b4ebba3c31b166ea3adf71ded6ba39d2e63e1867c27f18e4f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-nastia-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8e7406ea9aef30f37f9fbe7afdacdc9ccacbc6ca7adde2e225f40ae3c974f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157259 Malicious code in kamasada-buyda-butania (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd41726242849df73d2b9a091f2e13d318f4783019f801e923e88f6cc37eb1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-enceladus-relay-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74cf1cf32a2c53727aed61c915bdcb50b0dd721cdae51a624f96fd5736c2367 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145110 Malicious code in module-module-puppeteer-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b903f0dbe26ac625de626c67bb566688e158ff9bacc80e7f4f8ee0bb7d5b7012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lacerta-tethys-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daccd0e088b4d8b6d010fe3e21d6688a38016b3fcc3e89bedba46662a99af354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-protractor-jsonp-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89acabbc64b72fe317f20ed366b5d5b06f22a3e8ec4cbf3e386d2d07b44a392e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145969 Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aadf58e83bbd93bf6fdc89a44ce9ae8e2b41ca169e02a04313e35a1f02b2c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146245 Malicious code in pino-pretty-webdriverio-sails-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb71cd18591ac42686f98b32821d8f499526454701364f53578840deea6ebbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...