MAL-2025-159385 Malicious code in manadsi-safifda-munari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c1336a92cef831b978e2a49a2b462c80074ff66f86efcfab01e4a980d933cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154941 Malicious code in fadila-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652c199e3ad0fa887eebcb55e3970f7dc57f687ce65633e47f4560d395a31d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158782 Malicious code in lookingan-namala68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b183d054c1aaebb3064affbd475b26ea7fc1bc09fb33959933e31f5127cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149942 Malicious code in @mipta1/asdfsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba44668013ff73de26317f90619728330585937f42c0f6fce3af5d960f48fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150203 Malicious code in @mipta1/saraas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fd2bd38773cebedd07ca5271dfdaa2eddeca77201cb739d188d3910c05e90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151829 Malicious code in aiboa-mioloipe-agipu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435b015356cd085d458c8566e102e31ee94d57999d02489503c40a474be780df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nakala7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3e0d9e4bfe63ab24aeb1b8bd1311b8f841884faaf3bd3fd72aaa5f1edeaa49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141589 Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145938 Malicious code in package-luna-prettier-plugin-markdown-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75efe02b19ff9ec70cbd27c5dc3b7ff7f2efe7c12ee542ff0ba4d8f933f0cf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148439 Malicious code in tailwindcss-async-dorado-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a64b7109b43ed1c0f9e482fa31d66941c4902b2c0b896b79c946b9f4802507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-carpo-publish-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2be34a3c332013cc6fbf0b15eebd1688174c135148bd0bc0053a46ddf30815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-grunt-zephyr-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5618c03ace1b7982597f2237ad3ce62c1e20dfc2b23419fe11450d9d6f70b7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146312 Malicious code in pm2-slidev-jasmine-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c82d63bfdb148f6abe378d700534b1418f2f121eb93d5f772f86aee9aa7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141853 Malicious code in eclipse-gulp-terser-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7af3a81cf4b261052c0783fd16d57e1d48f64884ecc3521a0df8cebd25a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142025 Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...