MAL-2025-170544 Malicious code in wulan-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3098204118f79880cd45ed077f9f5db7d7db7bb64a79ca05b5d4db9551939979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167163 Malicious code in teagood-manaki93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cc0fca0aee1ebf18baa2cc7aae73c9828d9f1a486079f03d120e9c223f747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157286 Malicious code in kamasada-ntai-ksdyasai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ee2fe26fb5365042e0eb31d95a61d9d829512aafb1858469715a09c6351019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147333 Malicious code in resolvers-registry-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721081aa1d483891bbd09014143becd91e4a4aad2f1cf9b6a947fcdc5e8bfe16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144489 Malicious code in local-less-local-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5570abac996463e679336cca056a9b35af3a9d28fddcd22aff74a5a6b11a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148065 Malicious code in socketio-webdriver-manager-subscription-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81278b255b88f62ff9e6ea4830f9449e1d7870bf3f771773d4eb9ed6fe0819ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144373 Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-mocha-mutation-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba86765ad1d4909a393eb1d62de286cacd7f00f07a84862e0f6f275d9553d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142401 Malicious code in farout-changelog-apollo-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149410 Malicious code in webpack-titan-upgrade-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149265 Malicious code in warp-charon-ariel-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1a5ae50051ae441d11737e60536d7cc4a8b92095a594b5f7e1591a7462d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in famous-beige-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c394683c3a56d492dc7a409254c3ae7d7f5000509e733976b71cdb97b8dce4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial-violet-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fdd975028340ddc128695447a0860371a8dea796ddafe7c4d7b5ade58659241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-bubursumsum30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e261b8c284de7903e0f1e244f31b195fe8c6c6095d23b000ebc7b8b4b9f2488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-lutis65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97655a388da068177e02833b76eb89d260d5bcd49da809c571da9a725b31f06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-serabi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da3fce5fdfae1376b020098f67c3596c16181d55e32c9d4cb7f331f3c967246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137111 Malicious code in sunny_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7542661909e5b49f3dc3678c302963275e5bf6cea0f3ae56af6214f56b383f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...