MAL-2025-159316 Malicious code in manadi-scaisor-dadfr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06dd983a67da0bd5d05b166289dfd979dc166237c694dbac079f73e36b324c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158248 Malicious code in lintang-tea84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8889aae0a2cb692b7b5d133ab7dc867fd8e94b96315e837f75340ea78b9edf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169457 Malicious code in uafaru-musafi-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b06f7893defa3362572ba76794432925d17586d5bd953395537fa8d4438ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147558 Malicious code in sadr-corvus-canopus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb31474b1632669b500dfc33b6e71f18477eaec8f39b97ad1c17f26067359883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147058 Malicious code in react-bootstrap-envconfig-juno-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3b146043bb3e56c6b2f0c6cbfd5dc3564919bd1004bdf4292a5db2e8fa8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0ccf783d99e2f174768c7a2d194db3957b6b4005ac8c4e3b73a310d979249d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149816 Malicious code in yildun-lint-staged-octans-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7983dc65e29fc48e8e547d12aae1f60c133189946c4012e145b07c435d3d791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140219 Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-mysql-slidev-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e761a8ece0061aaff52c1ea6943574a1866e11eae624c631c31f2147ae9ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-commitlint-config-angular-soap-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd303f21515f0dff1bfdece8ef5956735f37b53c0ae72f27c2547c01d44b88c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-graphql-figures-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb47f0ad8eea6799be93d149bf247a1a3f8541ebc3371cc72f9cbb3e8c3d9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-changelog-xenos-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a86aca0815621f69cf5d331bc8091efad1fcdce25c829787fc1a4df33c99fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...