MAL-2025-164882 Malicious code in rita-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10686d08dd1f746762135148e84f32f9a845578352ff3f4297617a34c8879a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155845 Malicious code in iba-otana-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5106e92a2e7f3ef4c75b3ba549dbc05b9a883d8f17ac911f1b658a2eac1ba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153212 Malicious code in avminah-fagmas-fogogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f85ab00c0c95eaa805dc2578c37108d3a95def17b00f47e7dc3a455ad15fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-browserify-cors-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09a319db002601bb9c9a0fecedb7312cc0a0ffd958289a8912ab9e22e6b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-release-it-celeste-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-global-kronos-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684e56e46ef72bf385d82b2ca44a9ec22885037864e2c73ade1ce4b3baafa169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-jest-loglevel-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edf57c8e73260b139612b3a0dc1a3afaf7ece9e89c6141f32b134fff4ea4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-forever-nestjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1406fa4bd80fa829b6a7321e56951c0d3568b801f7775b62e7a21d9f256495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-apollo-webpack-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b6d3fa2f2b87fcc3aa5e1370bba47b406350a2e793c8bc6d599b8bbd58135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139332 Malicious code in alphard-nightwatch-reveal-md-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd303c31ae8b9f078b3aedcbab70c6fc87a4769bc8241a23fb7d2f72cc6648d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140733 Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147325 Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143704 Malicious code in io-pino-pretty-start-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7227feb91a808715799e857158fe7571b0a692dc72fd0f919c3b346390daddc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149279 Malicious code in wasat-andromeda-phoebe-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...