MAL-2025-160908 Malicious code in munir-nautyt-minahas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a32646191fdb5229e4e00e2c6df2f54a17efc5ee90409a6bb98b30feac76a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165896 Malicious code in shilang-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327964a51a79be33d71183b6417adfe7d927c860f7c71f03d1cbf776fc713a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154089 Malicious code in cinta-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b4f85eb0fae1e97b4705f05cbc0f70acd3c7b2fca3a4783e0086d707e1db4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153200 Malicious code in avminah-fagmas-digfagiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fad7570d7a8b85ef30201ec428364b8a0b42df5ad992efaaeb4d2c353370b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a752d7007cfa1c1d3aa790693b53e402df77febda7fc5094fd5944c585806c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141844 Malicious code in eager-aquamarine-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf13de1aa551bc22651a383030536d10cf1f8f16c43b6fef17e79218e66d5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-fetch-jwt-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 769d766bee9a18b6ffa733f2d7f0198a53c5fb5754c09505782843e9bfca07db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-csv-nconf-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 523cf84acb42076535525f5ee44480f13fc5d4564b1c0479f949ce1be4936ca4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-europa-antares-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f35a750f1e2d39ed65fe2e942c757ae4f634a276981126b42542894e1936b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-stream-apollo-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4c3f57d021643f309881fcfec23ca4ac61c886fc4619fcba72039358590d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-node-config-server-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27de1abef874cf3da3daa143496ccb15836fbb297490b54876df4e5a445ce103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144322 Malicious code in less-loader-jekyll-deneb-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed157d56fb67e98deba99a6d5281c9515fa8d59b328ad7646dd64e7fffe9aeff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139965 Malicious code in betelgeuse-andromeda-supervisor-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe094e00627a2f06acaeae706de8a734ba3bd11e9d5d984ed80007cf1c261d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140345 Malicious code in callisto-playwright-publish-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84bea5b7884fedd3cf87fa9645c779ea6d02be1f8048fda82a3760b16b90d937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144878 Malicious code in metalsmith-iota-oberon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f64e3dc0efe6c5576461c566208ccb68e9e5cd7aa713aad83da487929f293f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147314 Malicious code in request-sync-magellan-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c79f1efc842b2ad8058b2585be7a3aa35dd20a9bd08e234c21471a77b6ad3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...