MAL-2025-157053 Malicious code in jelek-rasisme-batu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f49b7c7919ccd4c635e6162aef746a5d90ae775905b6a242dec623b11dcbd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151997 Malicious code in air-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e26f9e9132fb1a56dc2fb99e55058b23f2de37db8ccc64c6ecfa998ebc66fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158494 Malicious code in lookingan-nalako80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a752d7007cfa1c1d3aa790693b53e402df77febda7fc5094fd5944c585806c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169596 Malicious code in uarg-mitaihai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a3b7a6dec0d43755d4ca6f3380b9e8462f3941e8fbd90025592666e677eba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170312 Malicious code in verify-ain-ukasiamunisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45bda1d477af173abebdb517e21f4deaf43d14def63dba8f5eb966e749228b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee42eb8df0aa941d8f0cd50959de8470784b289a07e282eaae127b5732828012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155176 Malicious code in fitrok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d11aacc1aadf0776163310ad9b66e2c67c241b338393a7f0c04a7cdbe83072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c840145a5e16f2146eaceb7e7b81ab6ca65722a404126dacf6b2f3e20f7b23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151921 Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-repository-yaml-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95beddb139e3952dd262d123f7bac8e6fb2dcd0a25b82d6eea52b3c55bacdb52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-xerxes-gulp-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca524df6fe30d9a679a3caf1797ead4065707ec93bdd4b4321abec7aa38cffdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-gridsome-odin-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19091a2914c2f8bd7d09ffb63692588d7e84837374a86370809181c64fa1a889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-jsonp-promise-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb40a31cd11f675d3723d8b1395719704e6175d0de1759fa6ee4004879d0d6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-frontend-loopback-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446bda0c0467fc665c69f99d43419be929cbec5659f381ccd10b9d71630fe45f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142656 Malicious code in fornax-test-kronos-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 373b39091aad036983cc8935f0362078e6c6ae8a018b3d351bd14c6c67d98f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141165 Malicious code in corvus-puppeteer-eslint-config-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a339ee93474eeaf05bb0ccc6e79ce00d741a53f99c8a1e41fed151288239494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140051 Malicious code in blitz-magellan-betelgeuse-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5f69b47cbf03defc947d8b791ac97a071f76257cf87a5173e97303e7d827ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...