MAL-2025-162342 Malicious code in nokire-arhani30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcd36820c08cfe1a381ac49083be86800eebaf2961f9fc2f26635a78eadd802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151078 Malicious code in abang-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeba76b3f734b47a24293de1635b3cc45bc0abe766bb6f9823cb9fe0625488ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163109 Malicious code in nokire-namiresan55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cdcd7f4334f11013bc9237e5f117cee728bb92a61681aece837dd1fdc3a93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152212 Malicious code in alfiansyah-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a96999eb79abb43c51922173f055cac4626b2741eb720bf0202c427ea6fb2a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161229 Malicious code in nabila-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12876e8cbad7e360d43daa19fea64a3b699c158b322d73936b4be7e6def90491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164438 Malicious code in polymedr-minus-buipenaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7a77584754b0df1ed6551c159747189fd0a72a1576f7ad5d9fc8b69b263677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-pm2-capella-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-nuxtjs-antares-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3850f7fcebd9ea546cc4cf330ad1c8e2c63e90b43b3345492b1988fd55788ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-mysql-registry-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e4f75cab9cff1f6fde3b784a8cdac914a4e01eb4cb122e3dedf1e72606ab5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-duplex-postgres-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7832e92751940047922d50f933d84f6178e5b9be8ec22e632df3be4ebb452c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdd4098cf7952532438e0fcee118c18ba0061965c413cfe88a091ffe48f76af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-dotenv-safe-elara-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504480b3893cead11dcc82daa37f6b6ef8bb2861e471a9eaeaa0c85d0b6cc159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-zenobia-repository-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae2136e5bdbd05221b678c962214e1a8d32d1041f90059c0e5d329e1d48d0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-library-jasmine-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e649f5132815d972e00153417bb9efce79e604707867914d1eb4c868e30046da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-cosmiconfig-solis-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5981f825bd720b550d359e8a17c2bb67f513f8565725791de20db81dc709ea27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...