MAL-2025-161835 Malicious code in namasae-namuda-miopd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ae08edf8521a183bb24f1d063e360a3c8f786c77ab0854695e469ee9800787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167865 Malicious code in teagood-yakuna104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b26da87bd705b92797975497d0b2da3efbe6ca272e765b23c9ece110370d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-nightwatch-zenith-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fab1d6691d3074618bc6359a2f1daffefbdcb0ba61b346866e881966de2a2d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-soap-magellan-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b52ccd77b3d326b562717c132e5824267c56c44d0c2fec12ffdbd096976b6ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-bellatrix-less-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd54695cc3236f3efc65f64d59a944e42dff0e5f3b0e47c60fbd6525c622b52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-astro-ophiuchus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3fb2505e9c00b648160e9998edbd8d5d7c5b389069ddca7150a5c3cf789f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-run-script-kastra-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9330f8382414519d87d54d1c2a7975ad454615e35b28607ecca8b6e78e0e8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-helios-vulcan-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8a72caea2726732f4da07c57c4f77268ce46037cf604f1bcf2950d2386690b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-octans-kastra-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb07606dd886e1bdb0d5bfcbbff59795c376489c1df9985da7c1ba407f7d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-fornax-pegasus-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e40397d6cb0a62aefbbc39af3c9a1df77c5115ecebbad123ef705f0fcadaa15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd843ac6dced51f98acdcc930c20f0cad711abc9b239c360b831e0741fb4a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-less-xo-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a504bf7c4d1d9c1665d27175e7e303cf7a0698c8d6828ee8a8a07fb9acd4304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-dotenv-parse-variables-izar-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cb3705933d0afb8257fbbb769f307552c28fc1caec37d0f89bcfa8b30e937eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-izar-winston-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b9406e604fc2c6303c12f06f2160878421f2a4257836f24b73c851fa490122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-wezen-gatsby-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9a5dacd1d551aa631da21bee30bcfa94538b09ab68a48ce915dbd65fad3a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-hugo-yaml-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c0e1b1c15e19a880c6cb5a4a289493b09db9ef6d668639e8e3419b0c1d2333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-wezen-jabbah-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f16c45845dc578efd3424bfd323bdd3c426033ab521d066d222ae1c1c9b863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-magellan-acamar-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e99251e7b6d6da522255aeedd0b8687a7e623c19e891943c12469e07c795ea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...