MAL-2025-164518 Malicious code in prayoga-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa8f8106dd774968c542459426633610e36e93686f073dce1bf7a870da5b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-tan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d91f8cbcfe0e34c99b9a613a6289e5103bd333897d8363daed71db98de07b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142535 Malicious code in flexible_hummingbird_sapphire-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093287ea3db394c29eca74215b0bb9f480e30159f5db1701059daecc8cffa24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146454 Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147933 Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144394 Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147934 Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-package-remark-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc18aa99ef75cba88fde8f564a276ae4df269c350baee22f312d7bef7dde888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-cypress-rimraf-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493466bc6493159f8029ee1e528708c0e1375665215a2c5504d479db8370d0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-query-hyperion-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-concurrently-markdownlint-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967406994297f477ec4001272a2beec41ae29e16ba0f0c229bb246f1ce5bbd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-zenith-cygnus-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d084c950dd5dc4f71460664d9a08a96009f6beeb79aaf14ec9c669e382574b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-perseus-quark-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b166060c7d70f773042354bce3a82f8009a453a93c56dc02a664e37b59419abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-iota-flare-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a50c96b1287c51a55201d73cdb9ecdc1b3140a6327aae2f01394af233affd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-wezen-orbit-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff9fc080d726744bf26af498f5d41c74b318aef7f0bcb6a90d9de1cd991687f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...