MAL-2025-162358 Malicious code in nokire-arhani45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecda597612b829d17979a923b9b4a456055ecf7a3edaa75536ea8ef6b95d8c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-process-proxima-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b237f192f447599cb3bcd59b42f719076d5e72dbc8333c2cbf1ff799b595a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139514 Malicious code in apollo-halley-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398cbf2aed0a021ce9867d71a7b7748b8c94de42d368fbefa3c2b94326010a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142440 Malicious code in fetch-deimos-acamar-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b897e3a9820ef17d02f095ee4115b692e66dbcb446858ff17bb002112e015788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140829 Malicious code in cluster-kaus-tethys-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acfde777b4bd381717d500a5ab96e8adbe32783b32e2b42c4bd4231186c8fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148035 Malicious code in soap-spica-gemini-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bcfb260f49b1ede378ff977a58e4f393dc0062910f976fa5522ad95f9da14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chromedriver-metalsmith-toml-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a4ebf7ac7382de09ed462478b2c913c3b9a9bf86d0bb11b53ad48aa1a13c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149826 Malicious code in yildun-warp-orbit-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b21db3f134339742477b0c7535ed2d243a6e7cdcfbba777f7c34a1836cc58569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-charon-dactyl-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149211 Malicious code in vuetify-ini-framework-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c1286ca9bcc2c22afa783d312250a4e270c79b9e27f81268ace3058bd40df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135257 Malicious code in lisa-serabi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40af467331e1c83662167be59f967295c8d873a50bef16bfc00682c6aa3f67d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-mangga35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9641d06f0614921b402b24acd3140c2022a4516391a9bfe3019a47f6cf6775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-brengkes67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ded733038c775c1dfcdc41b5d289257c13edc77c75a2a78d970f87f882cb31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136545 Malicious code in registered_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d5b92156973565a51da48210eb668dbadd63090bbd7e564acf8b8c6cb5c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kacang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8badb8571149901c3ce8970d43df45a32fa04379f89d9e0f9bc56f7d13699659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...