MAL-2025-166157 Malicious code in suharta-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e5bf06fcce6f0542eb76fa40fdbf4822009b73db0b33ceb5e3a5b05d9add37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150364 Malicious code in @mipta19/g1mphser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b05d83ed1dc103f2eef575034ea875a076342e097dfc976e9987c0b268f6f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156034 Malicious code in icha-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7707abe748297108c7d04f282d77fbd5abd76a15b579e172fb5566bad8e5adc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170126 Malicious code in upilka-lukzi-ilkuzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a1586e9a4f203882ca8934514593b3cd4688401cee23e12ad79f3f4420000b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163797 Malicious code in nudela-ofgaf-gafjhsaaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab039581100156c0107ed04ee2fa17a9a89e12cb04c6d18f90a94b65fd40b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157824 Malicious code in kuinsu-ukiu-vilakaasnaubimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21818031ed64b2e888c555ce19b8a684571ac7036e1a9bd610aa75159d9fbee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165447 Malicious code in sabua-muyaig-bafiafufima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c652f83274ddac5d077c3f24982c8c057c1015c3d36572cf5a77e8e0c900eaa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-hydra-radiant-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b95aaf98636cceb7379e4df4336d4d867d914021b5a92d636bba39ae4c0381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-andromeda-axios-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f60d7d8baca28556fd3dd98032288246232de178e0815872d5dda419932b7574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-axios-hydra-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf107bf1db4a8661d5f4e52fcdb8a3a86bf43c0f2d6f71ec9c10a8f7088b89c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-scripts-virgo-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fd601f39e0fc89bd05a7cddd3309efb425bd6ba552c9066f4999421f0c73d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-semantic-ui-elektra-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1da63aec152820d045eb1a524542bd027d82aa0a13ad938501d35379627961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-weywot-wasat-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 290545f725cd279a94b1995f055687e9776c2b2cb77e25363e0b64b43f5e2637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-prompts-winston-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8d9301673d88daa55f7e71755ffdfb1c684e84fb6bdca24e668e65b18272ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-quito-lint-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e3ba43d0877d7582fc2289f6dea6ed0681e495e93c77c1aeb965181bff1279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-phoebe-graphql-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f68c04258710a2b6f395d4cf50b5517baaf63d917dbd72a928d9bf32e8bb1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...