MAL-2025-166417 Malicious code in sunderlan-ud-valanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92095705a777f254953e20b5f065ed2ec402ab08986c043fdab0ac93583c319c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164818 Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151509 Malicious code in abiuna-mobile-amaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c10c0b3d6d4a91ad49d944df149147c12166c98c37c1c2f93f88373f9ef114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154247 Malicious code in demadf-sadar-muiop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc88f661b4ab13cfd0f54a55bfb01d23be0dfd06bada38cd6d4bb4ae66990a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166647 Malicious code in syahmuda-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32fcaa830d9f628881e49a10eaac287a95806d1ed8c226026f95ae0ba36f25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157230 Malicious code in jurss-zsaasd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42dc9c3b90ff4a75c86f156ef3426699be1503f3be94f6b9ae5c84b77e08bd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8010f76cfda2befd751a5c896c91149a0f373b7790b0e04c5af24947d4a6380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-deneb-helmet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-regulus-standard-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b79aa20c071020cb69b73da114fec202dd668a16bccd8e67a4b0feea625a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-phoebe-ophiuchus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35c8992fa4656e9b023b1da0ebd331ecfa929abfe74cfb01985916ba08edcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-iota-testcafe-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1560b6c8b722d09568f71ef3cd851c6896f97b12a95429813738ac245e8488f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-babel-juno-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efdead4ed42f6f74b60a3017dd381e0f65833d1f1c15b4575aafa8193a99305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pino-pretty-chariklo-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad8694ae5e9e2fb525de2a361d94caf1cc4b51939e350ba2974d62c71dff68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-phoebe-package-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982866fd39617ee1fce0dd6dd16c6ce9c1e10f05735ce609b8f0921d02c7995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-zenith-cypress-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209dbb5037c02adda861958d0b5ac85293991d0133aa42e846b822f3389038bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140020 Malicious code in blaze-equinox-ceres-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c2805a9e6173d86763438b0da3f4653180b81b634a3827c6a485434b559067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...