MAL-2025-151284 Malicious code in abiba-avin-abu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30a34db7c8ac3da91e5d1656414d61448ff45e267ab93fe75a371b6363d253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161877 Malicious code in nasrul-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52939122ebb702a44755867c89030d15bfd5c5955ac57dc6c2f663e211945d0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156505 Malicious code in infi-gfobai-jigitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7ffd608f49b08b6262311ce3e9a8baed51d95f29084e3aa4c45b65231cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157838 Malicious code in kuinsu-uyillu-vilannakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec879f5500ca0dfb92333d712c8fe5328d13446bf8594f5d1ad72a66dd3fd439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152285 Malicious code in alfiansyah-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c10a8df6d9b37028aa9e72023bac44aaed9283bb136729a2ac700c528674b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156448 Malicious code in inal-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ec97fd4e130bba5f71ac763729ccb645c27a4416b2cf5b60451f058f8cf4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-aldebaran-helmet-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f900c6a3ea209cd194b0027126b48e7dc7db16c34e75b57b0de4572dcec45a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143292 Malicious code in hercules-protractor-heka-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e418f0bc559469130812cf69c9e779b415806d81ade924d7975a5e386c1340a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141900 Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141794 Malicious code in draco-jasmine-polaris-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ed84d11bf3e9383dda42c9eaebf1362cd2ba4e194cc8465cf7a2e5729a566c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-aurora-neptune-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92dcc1703b8cb599291ed4ccd67e64ba3a5a6e55d18f59b93369f603cacbbe50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-charon-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6847fd56e5f61e5388f977b14d33e5665d8d11a56e30d5bf5db8f882ad91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144798 Malicious code in meissa-chakra-ui-delphinus-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f49181e79304a55829274d7b692031d27c57deb4690a3a3e3c7c977092f86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-fornax-telesto-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85e910c3c85298b0c02b5c482e89d38842f8222aa17b4fd8a00163febf72fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-slidev-luna-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3f94ac4f1f9ffbfd360578688007afffe72b4e251a09579a1ce567d746749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146842 Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149424 Malicious code in websockets-procyon-mongodb-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448205cfd0847c49c523c6703f1cce3e48b8d2c6e81873a334043f1f9a036e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144629 Malicious code in magellan-cosmiconfig-postgres-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6319fc0d1ab26e05d79ba80fb8c298fe6937053966ba3ee8ab9fb93445e51c3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142905 Malicious code in gemini-mocha-impulse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b010660ad164a18819dbd6d24421ef243c375607f6d17327b70191151552afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...