MAL-2025-154522 Malicious code in diago-kulpo-lkasuzmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fc027639bb5ce6e125462c2c81bfba96988051e5fc09adce2ba31885d2882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164568 Malicious code in putri-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed91e442e054db8912c77e3c6947492450233ef50ea6cfb5098146488d60ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154079 Malicious code in cinta-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6279bee54d20c9068fed5ac4fb49abe768d96cd657f2d5a3e9335c49c3c3af5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150246 Malicious code in @mipta1/sisup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c075f880e9197ec3dbccc352101aece7fb7f49812a1c9396bf7539b3d38632e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163808 Malicious code in nudela-ofgfaf-aagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a447b4bb627400ef467c97c9bfa84892099dc2d948bc4537ad3ea8a6e8e41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149431 Malicious code in western-amaranth-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256fcefd037c6bcf57310c55d4eee222cb6a258399e8dfed1ee8e4c5ba6a1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140126 Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-cors-lint-staged-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff6de8a612c21ba192af4d769dd5031ed2e5826c6cc048594abc611bfac9b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-cosmiconfig-kinetic-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdc1271ed7b3d96e54a5350600851bbb30cb982d8b55b36f0b4259d96c41a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-magellan-mocha-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134d8b8ad0a608d770da2b282ea99ddaa6fcb5459a7eea6743382b9852548bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-oberon-mongodb-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0201ed3bfdeb13d9226e95c1bd978f463a415a0f7ed42402380176b350640e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-xanthus-apollo-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bab9a3fbabea8e9eda0274a512f0c48eb29716a7e17bb3f5383dbf3e01f197ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-indus-telesto-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e010405cee714fc544f42d8632a9cd0c8322ff38222e8bb03224e51fc0cd1eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-docusaurus-cz-conventional-changelog-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7d9ddd9b0082be83bb6499eee01a3e4626c773b70f7731ac99af42a83c4fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-react-bootstrap-react-bootstrap-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ac8de44fa35aba6659662beabc7f831c0439a35428e5690362dff458355543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...