MAL-2025-162760 Malicious code in nokire-lokcek1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a557af184c6e2791389c5f54e144a6f1cdc661d6866cc608f9bb6997f82ad27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154366 Malicious code in diago-kamli-lumailaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c7d006e9641cc5e94fb1e3494c27e8af2f395f6320c7afcdc43f173c159c7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153306 Malicious code in avminh-afagais-ifofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8f856801932e05ce85dde171bb4667070accf2aa6a80dbc1f120d59c3b36ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-build-koa-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6cdd7c52d023e5b645b46311ddd666abaadf7439293f946d76fb73259ebc7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-titan-upgrade-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-mui-adonis-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9dd63bf0f4f6b67fe7138fe02f89ed61db758afc8603d44016f528d34166716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-izar-jest-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bca4ad83dc46cdec9d6f957011f569c0fcfb8768ffccf992d588bd78d8c670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139838 Malicious code in axios-spawn-metalsmith-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3bb3d243839289eaa35ed8d5891af6115202b3b623619514dda00aefd13d2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147808 Malicious code in selenium-nuxtjs-upgrade-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a1667e019874b43abb7713d4776387e56a594b698432319c188f692097c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-algol-react-bootstrap-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ed5e4fad8e5d6989b6c0c9be3075804f8386ca224135fed892411aa1acbd39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-pulsar-mini-css-extract-plugin-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff0fb1b97ee68f4cc8f0b9b98ba61800524ef8ebc7b178ab015f3513bcd079d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147987 Malicious code in slides-hydra-cordelia-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d6330753c3485dd0c3aea450f2bf3977f19c73564ecb88f67cce4605e4374a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-enceladus-postcss-loader-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012676c7390d8b13380faf52840edb140d31392dd2425aef80743ace04b40549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142798 Malicious code in galaxy-websockets-sagitta-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf514cf442b1880a6a93622c132a8b6c2cfdbd289efe18d9fd1c089bd327233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148367 Malicious code in subscription-test-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1172938e85e672a705c123845243e3c77d61349e623171947cf7b653919b6587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144967 Malicious code in middleware-vulcan-taurus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73ac4d05a1703591eef955a9f697311cca2af1878630712acd4a5cd8b938a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140945 Malicious code in commitizen-terser-hugo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a2b8214a60a662a80a0f0137d8ca285913123c2808845be9f6d435e37b6af45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...