MAL-2025-160092 Malicious code in manurung-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acb15e568008e1484114933854bfb0eb9c06752e5b0a6f2b284b836757419e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164132 Malicious code in pilka-kalimas-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d75340e25d34c84dd32388aa4a772b761fba5f12da4033dfbe95d52809e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153004 Malicious code in aviaah-afgagaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381cda565bb424edb6d491d7780e202ba9dc1ba4df568eba9e9da976d798b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48364c10d62651ddd0544fdee3a398823ba87504d3041a85cd1eb09d14671b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157656 Malicious code in keyla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f0288a1af93850369feb0088c84d3af59a76581152b8f44e36aa38b9ea9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158912 Malicious code in lookingan-namalaka95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7528d3c70e5f507ab8c262ff1eac5d541dc761dc094c09c6c4f7440861358ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157528 Malicious code in kentung-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6006f5242e397758ed2a286c28886832bfd6fcd39f41e3477292e672046a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155589 Malicious code in hafiz-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3a6f61e0e88cf5414d4ee7c24671ed05f4f23025d32e1df09db75e3b7a77a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163940 Malicious code in pajero-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248f03b8001b05b6a36d27b49a238ca573ed15119b420b019500fd5cb22b3e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-winston-mensa-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725ef081ecbc32e0eb2fc6dabac94d89410f091e67dd4de94eb0795f5c7e7db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...