MAL-2025-148187 Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-start-semantic-ui-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca2e2719f9edd696a7a5d29b1c059a7717eae9f96696261990915eb6e34e7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-framework-andromeda-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf77a21aa60073ee5c5f6339fcbd7faac1ac57a81404777827d4cd1dd5a0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140825 Malicious code in cluster-elara-eclipse-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048347085c1a35d570cef25eada38c7e80fdabf3e21687fae65165bcf3933e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143659 Malicious code in inquirer-remark-upgrade-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8f4bdb1f8f040e33ec40f663df8fe7c86704238205484e4164f4e960b24070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147042 Malicious code in rate-limiter-loop-npm-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147793 Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-dynamo-axios-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609bae32965b6115352a6c6f0a2e3f26630ab7c7a85532b8c34e12ada679b9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138213 Malicious code in yanti-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c162a39ba4b4d63336ba381268b1f4bb9b13e4c11a719675fc4cdcbe7d53b4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-lapis51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6691707bd2018c7fd0d72378db8cc310304b627b71ceb59f20b5d3880af429e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134993 Malicious code in kurniawan-gepuk45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b08dd4be212f92f384358b6e824968cb3155d6a49a6d985791c8931639758c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137227 Malicious code in tania-pisang75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c67554e00f47a29e8c8af2dbdc69f7dadcfc320269c918b427b37ec6715f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee063019d7be8d143cbe9ebcf2b8e1eaceb049e998b582158e6f302e6d1954b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-serabi2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ebd95d6cf81b1be67e9f1f56ce79937959f21cbb5d65773c0b9d38079ece37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc51cbe86f91e7db399f62a76418e84827a94a4d8a6c4ceb39ba90c5ff01aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125495 Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21b38ce7b8826e8a53334c70e97802f8c4d3d309c16c5157746cbf06102c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ketan86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f70bf7a1fb56adfd4d65bdaee72cef4344fd9bd4f949aeca2475fe8691b624c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123803 Malicious code in umi-ketan33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc857c808b97fbfe162c0ca25bc155ada72941f7382316c26c82696edc97b48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...