MAL-2025-154981 Malicious code in fati-gootda-ayah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb9fe2f25539c1b1e3d3634df8d5f6f14ccd4d143783abe4ec0e19db52d788a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bda948687f4740cb1b0f8fa097dfd9c2934b3230bba6a4c26558fd4444127c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149805 Malicious code in yielding-tan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81d91f8cbcfe0e34c99b9a613a6289e5103bd333897d8363daed71db98de07b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jekyll-slides-nashira-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a83d206b421e4fd6755696e33f06ef321c65c7282e0c25b886013a0bce0f115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-enceladus-aether-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd05fb12363dc6a9c123b7274c9b266820561db8067462d96b4bf44c9a09a52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11cac21b59d57f39403b3152a77369e8dc1a301daf2eac4c4931b9a68807b037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-configstore-regulus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41feeb09f0a84aba33cef6885ce6d13ed77111fa4a690bfcfb8930d9d5d13ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-eleventy-google-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f51d1f7de0e0269af708961d18f2d108d52be80609f5536d347cfb63070de448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-concurrently-hermes-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0fc504fe20b5d7a624bf4f16d4f30312aae20867a0ab2bca5a06e6e80bd777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-mysql-element-ui-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b0b37c887e82b3f21d7c2b6fc291bf49b40f5d203b7087a9ba391acf920be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-nebula-redis-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bec31780f82ad624282d3562836cf8b9c2f15f678fdef4cfc840fb1c8749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-cygnus-commitlint-config-angular-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1141bebb30cede52e274e8085246ba2bf01af23cc1e83a43047a2bc8e1ad55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-indus-spinner-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73023c08d8063b4edb53e7982c87d09c97a499f0d4949923e44741ed808395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...