MAL-2025-159493 Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152271 Malicious code in alfiansyah-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6db1d0b4c99e4926c81b20a6161f8aba6a6b2ef4301daa325b0a685ead632b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150874 Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167470 Malicious code in teagood-nalikami68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6411f5f189b89210b40685345d39ca6f6a8d8032ae5b258ae4c38fd02ed3fa5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155846 Malicious code in iba-otanai-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eebf1a93f684e4cc5c0cc9152898129827c391ce65685b05fca7fb79b8e01cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160558 Malicious code in miracle-dokoi-ikawaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb086bc0c92fccca3783bb960fecfc4c6f5e9b2f50f5566b8250a61cc089001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159416 Malicious code in manadsi-sdda-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4bce12c18b51986d96c7addf4a4d2d461bffb2b9e0f35c8481197f6ebc450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164458 Malicious code in polymer-intsi-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6f6803fe6fb84ac1a8eeb84ad8e9aa2d96406644709facfb7bbf0446bfeb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169975 Malicious code in uinsu-lot-bismayuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a91b00c34774fbd5232caf79e3dd52f8b3f0dda33803db4ef35b76335ca0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167426 Malicious code in teagood-nalikami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f724f8e8da98dc030a634caa9c77934604770a694cca93fbc7567f7475735980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140741 Malicious code in charon-yakutsk-elektra-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d980e0c9ef55991ff073ec09e7d4ea3a2e38daafe740bbb3e0f77b0e64de402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147173 Malicious code in rehype-impulse-webdriverio-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d663cc2df1cbf1299f2e5768e87b102d9f8ed51c2a21762524f1959577dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aed2df30501f45d7be301a0e5be1666e00b4b3342c466d56d145e396b7a877d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-ophiuchus-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a7dc6fe75df179a05686ff8f7706094cb57cb476065d9e205db937812cd93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-stylelint-nashira-start-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ebd32b4bf8b3a577c8241ab5654cc0cbfc3b39f81ee7cffe476b70f977a77c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-quantum-eslint-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5583c09e585f89c6e70686d3b73554e679f9f23c2d3be27d0f2939bbfee84334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...