MAL-2025-168291 Malicious code in tealove-darknest34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd7d6659c550215f9737424287a7b53b6b6134c164a7b9f5b60316bf61fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158045 Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168269 Malicious code in tealove-darknest14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808d9a29c6664429644a49526406f369580f5dcfd80b86e9412a2cd5a666ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159972 Malicious code in manttu-rolsae-nsutfady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82060041a3c5c89544c97834bf33f52c406fb6978dd5638b7cd515a9be01f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169618 Malicious code in uarug-mitauifahai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d712a0cfb69321367290425db743b6f82a3d0ac680bb4de4446069dc3eb26c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165267 Malicious code in ruji-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f50d6c6bdd2cedfaf7bbfe97c8bf0c7ddff9c3cc1c0f88b8f1c98d9b851bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167756 Malicious code in teagood-namakai96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a1508320493850e0cc6ff4d8082be9ad024a51f33a4cb065806de85a4c855b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161217 Malicious code in nabila-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd2cc32f22e2000fb2fb17bd1c2a68ce2960b20296510eb9074c9221ebf93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasik-nuts-buntal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0137ba870c6f973d3986e873ab5f2c43b1c13a4f01be5940da91c8face16a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-flare-karma-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ecd3f80227f98c1d0462c968014d6de029b6da6be6262f1068d0597315dce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3d7c7613ca3b24203a1a6b67a092b1b7c05ab67e78b886ed6158382f56e95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-eris-yaml-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d825d7641d6215aaad20f1c38ef478c8fe5bff6645108b2dc855cae94a207880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147469 Malicious code in rocket-jasmine-babel-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a6d70a2f60d8f247a526bc8010d17d88d90d132cae234823920ae1b59332c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-neptune-buffer-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99f96519afc0372b2dea505b8c770086ade6f53b8d09c6710009b159b9c71f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a451c521b719214daab4309206ebefc8786247beebe36e90572871635519afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-nebula-redis-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bec31780f82ad624282d3562836cf8b9c2f15f678fdef4cfc840fb1c8749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...