MAL-2025-157612 Malicious code in keyla-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3972ad022b87e7cc3f437d78e44d18a977c5f7996bc18a637dbea885bdc2fb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160361 Malicious code in messi-tueda-ghdfz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42832aafda374a5a277d5bbcd6f970727e8027a351d14b518c45980bdd6236f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163885 Malicious code in nusdtafr-msiuyu-nurtrr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87fd37f97f7c9b3184798307414b251b6bfd6c8b7702013dff05719f62d040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-slides-semantic-release-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c9aeb4ad6ee9602aa39fd98035a3b4dc787423994528a4f7d5bd4c50c239de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-orbit-ophiuchus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95be8eae3b5267ee3a554f7dc53d936cfd1414b402055900c1bc3a8c763e49dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143079 Malicious code in grunt-xml-mira-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148206 Malicious code in spinner-playwright-geckodriver-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ca3609f32708b02f5163fb276f5c7fda98c95d96783b4fc183c215da71bb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140649 Malicious code in chalk-mini-css-extract-plugin-await-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc95d987297d2296f6f6c0e9d232cbc6e474b2557b42681d1cf2da9395a8e419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143128 Malicious code in halley-alphard-process-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fd87a0b41ed17c1e8aeab77b69a49d174d403a417552c2b91afa0568e48d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147705 Malicious code in scorpius-chariklo-nextjs-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3accdb3220250ef79e197b795a03b196b4c924a07d04d83687cce7a3762d6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148591 Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b040a662f7e8b05e1b6d1cf3784fc142e5ab38537763c5ba7fe1b304a1f7eaaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141448 Malicious code in dactyl-native-superagent-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9399d903b38766a58790ac43991a2e3704dcf083ce309f85ffdf08a9046286c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148660 Malicious code in thuban-parcel-fornax-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a2162f7ddcda39a5718acfc616b26db22ce8a0e0da7efc71531e95185cefd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-bulma-rate-limiter-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bed51eee8225c075d6770a50c8e2d5504bb307ce5e1444965ff85464c88460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-miranda-development-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd5b8f4b034d6769a2c809520c6cbc938c518d6dda7799b7a6b0eaa61476e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145399 Malicious code in nestjs-magellan-prettier-plugin-markdown-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051241d3c5a6136195caa4925f68936f91d0643760a4e9e13cc48e4b44575394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-webpack-semantic-release-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b30c4a5f5b373e1253fbc5568dde92c8b9d95968be5db1fc0c7cd27e209803af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nightwatch-sagitta-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da665bbaad7488248480eb32e269a4365ff5d2185af8c41490d02639d46dc5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-enceladus-rate-limiter-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15f38df4dd9bcd623e077041fd6fe4147a12433ae157325ae3cc9a4cb9908c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-slides-event-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ea016128f3a3773671f5032bda5869a87bfa65d6609d9ef5f19160d22298b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...