MAL-2025-153288 Malicious code in avminh-afaais-ifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2684e049d64a1d54c70f4b0277f4bc2cd2d0ab4ce962fd455e67ac98e3aa49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156396 Malicious code in inal-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3441455a066d2189c93110b723d12ff282547e374760d17d16de440672ebb152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166034 Malicious code in slamet-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65c259ecb2d3e62a03360ffbc239cb14a407130a573e98096a3621259e9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155746 Malicious code in hariyono-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48168366a8832abe0928ca4beed28c91316976f1abe5823904cea090845a6cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160803 Malicious code in muklis-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e537cfba2a7c2395e256814d776984a7fbfe40057ef9a8c9a3864099b05bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166808 Malicious code in teagood-cuekin42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98aef769cfab1f4fb4fa5756fac6e0a648b50c77d0f07d48a42ef7209ba09a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-cluster-pipe-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2e5775aa128ed1fe7041d5dd2e99b52daef172c04350b6ca8fe5a0a45fd526e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-sagitta-inquirer-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7915274b61f1f22bf6d1e217c5cd0ad40fe1ce4bad4d9789e88d6007dac75532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-antares-halley-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aa934e84ed908ddc435863535aa884c4b9c09bf009834d8032caa86810ad36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142200 Malicious code in eslint-config-got-loop-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cb477ede27d343847c0229dbba4aa87dd19cd561a5a0a308a91b247ad68dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-less-loader-schema-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db0dc8495022edd18720bc3d01c057521a49f26642078a89fdee6a7e5d00f69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-odin-hermes-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a12a2e3d29015fd60bb1b74335050cd8247b08bd4de7445715a897fe6709a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-sagitta-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7555f2b8b283d0f1b33880c0aec348d71a94b6f520787045d49a43d4ead12f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-duplex-polaris-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb146b0c2ed00e687cef5716206c265a7be0acaeff3082bafc48c1e54e8872ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144909 Malicious code in meteor-fomalhaut-nightwatch-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308dc38b6e2e7e19c378370c0a5d745357f991acfffe7131e9a6b9d25b9a0d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146828 Malicious code in pulsar-duplex-chakra-ui-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475125da4e180577d2f6485fc6337dd3a6e8b9207f29411adea8142ac112a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-acamar-quantum-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b5c9916b04c82c901302f7b2133140245aff21e8c829542aa208b5e2af2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-oberon-draco-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed3525dda84b2464924e546f9db3f3b484347614d1b7b1e1a561b063779b2898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...