MAL-2025-163067 Malicious code in nokire-namiresan17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3623daa0f8002850fa82fa7defccb09c9f4de5a424da945f88bbda29d827a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167163 Malicious code in teagood-manaki93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 399cc0fca0aee1ebf18baa2cc7aae73c9828d9f1a486079f03d120e9c223f747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153635 Malicious code in azhar-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5431e8cd430af185bbec2ce07d1cd4217a6c7a3f2e01a0d21f16e5e33e37967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169093 Malicious code in tehnah-cogadifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8c8ab48c8e1eff46a06622635610103988bcac6b03f6bc4e3b8a2cd6d48e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-build-octans-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b0a98d3a3ba455a53d80b80682430befd058e5be89086e648c677c3fd72324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140984 Malicious code in commitlint-fetch-quark-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b3e4a30c69607b6f0cadd046feb617795bf04607cc2b4dcfb78083360c2a8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-mui-sadr-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0f3d8a941c3cd94b52f529a2a61733938e427dfadb021a5552b6cdffe5d6a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-telesto-aether-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92288b49e8c91825ef9377e7d4104a9ade87af1b1c307a256eff1113212ccfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-forever-ophiuchus-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad127b135587bc52e235a692a553f73b4d01a14c9268345dfa2eba252211511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140750 Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-umbra-selenium-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd66a2a58453a45d8f98afeccd219c9311538192deed2efd4c7bd2639be23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148065 Malicious code in socketio-webdriver-manager-subscription-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81278b255b88f62ff9e6ea4830f9449e1d7870bf3f771773d4eb9ed6fe0819ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147333 Malicious code in resolvers-registry-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721081aa1d483891bbd09014143becd91e4a4aad2f1cf9b6a947fcdc5e8bfe16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144373 Malicious code in library-chai-carina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-prettier-stylelint-yildun-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c3352d640999ac0d955a05f22a310ef41dde7cc06ef30b7fd682db91c38cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143674 Malicious code in install-eclipse-supervisor-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebb5dce4cc6bedeb72dcfda54697e0c1ee9e4ab70e6f7c8640d9a4aed1b1e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144489 Malicious code in local-less-local-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5570abac996463e679336cca056a9b35af3a9d28fddcd22aff74a5a6b11a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...