MAL-2025-163783 Malicious code in nudela-gagaghg0hf-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941a59916083fa76fd0d91b85a8f2d8c34ae2f9d5a772dd21842c7675d193a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154422 Malicious code in diago-klop-kalosibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a6f4304eff398deaeb3d98ad676603754436adeaee8b9c4d5edffabb861d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keyla-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa4f63460d9c39cc9d9d8f52410c389f25723d0b6d587d40f0d1ab364885e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152880 Malicious code in aril-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fb72ce415cfe23952cf69b25239fe0918cdbc1d23c11bec56aec8b2cdc8c418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157881 Malicious code in kupai-lukta-igaufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b022a53bd0ea0d82adffde4e5dd1397677a8608dcc241acf7633033d5026c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161765 Malicious code in namadata-munaroha-manuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3dc8ea00451db77e570b9215d0bf234bc7b82c5e9967ed844dcfb82025eb0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150726 Malicious code in @miptaa02/iifj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958864736a9a90f0297d702e86db536733059eb87b7ccf39b6327b1eaf5d66f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167021 Malicious code in teagood-lokina55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c23b263e656c5643c50aeb1ba6243cdce8606ecf4a1dcfc1b85325345bcdc04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-kilua54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964e16f46416b1cedfe7240df501568bfbdf15b570d8474b82f353a1f299bb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167781 Malicious code in teagood-sukuna28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d5b07690029d1a76136a4e6bd3dc2b835d63b96981eefd567e731442db8c51e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-si-fagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c6025de13b491f26ed5c34808aa77bd46112bbf60ac5cff24a611730b1eb04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-apex-react-bootstrap-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1970fde9afcf4aed637d9a4801d60378c96b21ba6bd3eaa788e07cea42a98164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-vortex-norma-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d27f7868efd1778340c9421225ec34498491ce2f4940a49e2df3a0c77f33a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-firebase-jabbah-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83963e190ee16a0e46c3d5d97c4e3e65793b6f16cd4f7aba6809f48e59ffc509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-css-minimizer-webpack-plugin-ursa-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01dbddf36a8477e622bf1732299f16d35bb423944f8678a305a18aa199ba0ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-flare-loglevel-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...