MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-wozsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63678e5aa561e1bb90abe9fcfefec9efd64358f1f9bec4451bde3caea403f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179545 Malicious code in anais-papoa- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6af238d0118e2e99c02d8345a3d389bcd6caf235a0a1b548f2b23a36b21b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172252 Malicious code in augis-pomdoi9r-mana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcc4c879252835790385e7f8a46f99fd22b0fccb40792817c06d5a6aa95c72b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166744 Malicious code in teaa-reborn47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5367d498e8fea7d33452e7217383935b1b04050451229077b07c841f63e7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-chalk-neptune-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f350c32b8471bb603135076ced6a8677a3340a0c907da9258101c78a84e7569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128114 Malicious code in laila-bakwan95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3c1d9a508ef19a415d28db81d604a62b9b45e5b0a6699b46419ea426f13994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-getas77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74c9be2dfa8f02695b5bde6aebd73a2108e7dea247169208c8249e9ae2b6362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-keraktelor76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60d198d25f4a087d4de9d05183d71ef7872ab30d1e26fc9a812f734d29771cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-empal99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908fafc9175790f93ecc592c9462ad4285296bbd6a54a318323ad29ae449a450 The package vera-empal99-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...