MAL-2025-167712 Malicious code in teagood-namakai56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389957b3000a9de4b91ca50dc1771dfcc7e0beb18a9c4c41f6d3d91a3ae88d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152524 Malicious code in alvira-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ae25b9bc88f839160f304692f2b06162bb31500c0a9c69c836ceb53247e570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154345 Malicious code in diago-kalop-kalosohabaibak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e7f59f45c3b729cc2da9c041d3862b5ff486659bb9d39da77db345a5ed4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167141 Malicious code in teagood-manaki73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73abe2677c0f4a34d74b7d78caad46b26bcdeec6d8394a17280a177453a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167760 Malicious code in teagood-sukuna1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f066415be82931a6d1682e6d0a0a286979c372f732bcdb65065581fc76d9753f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163706 Malicious code in nudela-aahaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e5161e531e9d051ff892d0b4a61abe219053c371d2788a8c78fccf848e042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170465 Malicious code in verify-tactiva-mechanical (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea755cad73ff37b99777376b680e2031200e3326480d44bc4b31b3fc0c7883a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164801 Malicious code in rinto-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4af2290066acb154a232bcb10bc6440d321ac0a6e6822945d3447750f2723a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162193 Malicious code in nokire-abimanyu76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b161e90cead3c2cfa5dc6f8a32b9edab02c2df65500746756f5d2913483c9161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154912 Malicious code in fadila-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7ffd8a6ee9694a74555c5f3d5faf292809c63eec0af5a0249ca241fc677029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155589 Malicious code in hafiz-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3a6f61e0e88cf5414d4ee7c24671ed05f4f23025d32e1df09db75e3b7a77a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159650 Malicious code in manda-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c6e86e3e71e639db79b0363bbb71acd8737f64d1217342d1fb0c687c09d351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153317 Malicious code in avminh-afagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622ae21dd6e47f099ac4452b10623db97018bc15ecfe20bddd8474920d31b616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c1914fb248efd5238e86553ad01dcc8e761e3df13dc3ba91bea0927460f079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-gatsby-less-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17d501af7a70b3a645083209e4b5ddb87b03d3ea34e7427b64b6b2c2dc89b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-oberon-ursa-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4008fe130fc6c3a1dae4769d222879a7e07743d7dbaba2fecee04cf629b0e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-tailwindcss-virgo-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9edb149950bc1f8e57d253ad39963008d2ce31b5502a98f0012b06b0e1b765f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-eris-telesto-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ea0249d126b4ef46d2141a771c393d1ff2c7876db21ce8aa957302f0de3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-geckodriver-registry-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e691b494fb554671ca898f3d2640e4da6553aec0748d059613a514ed6b731bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...