MAL-2025-168873 Malicious code in technical-aln-tol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5759f568637846fb05a3b8d702502aabc855ddac1101c2bede7c249fa19d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170436 Malicious code in verify-tac-malai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356b88f4b47b339f109743a89ee1f0ceb4be4f2f97e5b00f610a4c069dfff991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166713 Malicious code in teaa-reborn16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4db9ee5a03c895f00fa850f9ac099470c99a3739ba8b096ccca335da24eeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161799 Malicious code in namae-nadugsua-mitos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8780db6746f8b2390fc765692fb2ad001e31ca03a6fe5def7c6c607faccbe1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149850 Malicious code in zenith-fornax-nodemon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c233eed913a5955494e36e35b177d30b7e2e149fb6783776be8bba88cdb4ceed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-morgan-child-process-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44afe468a2cfb861a8c3a817e4bd3cfe36fff2d9c10d3c1d40d898c7fdf4c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-process-query-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ae5fdd1780de97e98dc346d7a17d21adba49ea87d63f32d85c3c2e030b0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-jekyll-commitizen-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8e3259b503d88674f19a0c0a8474a3cf39ac6c21ea4606c82ba85b144e55d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-config-miranda-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b2428e49d1c1fa813040f32afcbdb8c8455d25a0b20ba9ebfbd4c1c5e900c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146176 Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139225 Malicious code in aether-buffer-uglify-js-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6228be0503c0333dded0d4c2cf95ac4fb6da09d2639f6c0abe9020cb4ea23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-altair-convict-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628f999ab3623b51c84e48ddb51601ead8351a062964980febe613b812ec3a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143244 Malicious code in helmet-atlas-dione-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cedb98257db03c35ab67fcb42b96a9bafb82f748dac121b9ca66184b2270ca29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-quasar-centaurus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e3f8afe9cd02566afc8188735a8f9203d9a9305958c4124e46a4816455542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148303 Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147814 Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140944 Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mendoan73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546842a6222fd01d70dd604dc926e304a5b4b0101e64f7b8b1b49ac7d299410f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...