MAL-2025-188166 Malicious code in nanotechnology-ariel-atlas-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ac8d50d2a6fb517f785829fa5c9a3f25bd010388eeaa6547b9f90cdc68a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-lacerta-eris-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4338b9067de467c48ebcb22a68da6ba8445e72cde9039197e552af0dcfce6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179528 Malicious code in anais-papmoa-0pipamaoaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618351db4550b16a8e15b8b7693d37f0b24df052ad6759e691741da08eff6256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175464 Malicious code in kapvino-sovni-sgfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf668712d0c36a70bf7564ef4e43aad6bbb398b6ab63282698662443a71881ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325c9aefa7b63e5ae7676ef868d03019754dba871765a2a42aa865f28c05fecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144634 Malicious code in magellan-flare-duplex-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339da900e4fb0af3c00642893b3a1ac2ba154cdf80613d3f40245ecc4fffa896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100292 Malicious code in cautious_jackal-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51830629634aeddc6eec4a544b7f2d92379b857e58794fdad62356a13864ddd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f250be7f1a047124ac73dfb5637f5263a132cedd296bac6a3a74e0af1b1989f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-ketan20-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9842fc5396d1244161e3f2b959861f7764bc65e4c356d80e8632e28b6fddb3d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...