MAL-2025-150231 Malicious code in @mipta1/sdsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86c3762fca0ca7d9c5ccbd4837efe88b6b6cbbb75f1555b0ab4e76428a320927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155803 Malicious code in huda-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429506eed8fe7839ef21225738f1c067485d85efe98597f7caf81436012af58e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163950 Malicious code in pajero-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa8c483a48c4a4803459212ddbfb1111a63b19bc77fbea781654d7077633546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157096 Malicious code in jimmy-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f74b9941e9cfae47a1d3c8ad4670405f8281f74d39ca847df3307f517a14ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165798 Malicious code in sau-nakio-upsiiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770610e342fdc47ad637843af9fdfe6ae616512cfa72b03359a08dfae0444b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156205 Malicious code in ilal-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15254705bdfd7aa3a9edf63cd8a51c2b254033e8867a31d418cd87092204a8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

This Is the Platform Google Claims Is Behind a 'Staggering’ Scam Text Operation

Google is suing 25 people it alleges are behind a “relentless” scam text operation that uses a phishing-as-a-service platform called Lighthouse...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-winston-octans-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f91c97d70b21b2ab730a7e4c783098a6ee475dfc3913443291cf3a6f257c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-test-less-loader-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7e8a2539b21130591ea1153b93e93d2c8cf2018869f731d6cafd01ea8f9675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-element-ui-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5256a58de5656427ce43274a191ffc9eef82d97edfae23fa63c7f134e0113a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140773 Malicious code in chromedriver-framework-private-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d375d7091322fdaae73b2a3edbe7c96c32587195cf1297018f3f6329e3853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-cordelia-quito-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f3e8c12a5e507af7ff89897aca212fa0d62f72bbefe7c7107241f0d4f3606f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a451c521b719214daab4309206ebefc8786247beebe36e90572871635519afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-iota-levels-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc1e90b209120edf4d74a06ff0e091f6f03bafa674d8ab25ab5b7c514c761b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144454 Malicious code in lint-staged-dotenv-safe-pulsar-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57ac59c92fe865c160f36092ece507eedfe2118c474e2d7caeb74e7f1b13356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...