MAL-2025-161162 Malicious code in mutr-ssdads-batay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aead91aa366d7ecb3ff2f135060b486e4163c3be72ad8fa0ac3b4b6b3a448427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156667 Malicious code in inufgi-gotauma-anafuz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3a169d553c969022e35e706d737be148f1b4ac42dace0056bb4713e4511e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152599 Malicious code in anaisilaa-pafnolai-asigoga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef491f76f010c4f55cd13db3254b935e628e8ea89f73bdf26f52c3d22a396d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155996 Malicious code in icha-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e290516144637dd9cf0f307f53c041cf5b7666ca641650d06c90ead7d1246b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159387 Malicious code in manadsi-safifda-munarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43ed211734c3026fdc2351cc593cf851d0fd436be8989c9d03a258438d981350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156689 Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150697 Malicious code in @miptaa02/gud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4cefbe1dba166156c538b31b477276bb5faa15a5d510db5d60ca679a7260fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161980 Malicious code in nasrul-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 533771c0ab1d4652bdfd2c4dd1df88ca107bb75db54556ac570b0a02a914a349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167170 Malicious code in teagood-nakama1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bb8f2172b59c1c07b294120a321150b990a3460a7bae683c5882179e86d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ec22b0cb1d8f566bc4856b65db063c267fa92f2c7c8ec670e96724fb55ed5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165862 Malicious code in shilang-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028d2d4e8d17499c177ea37e854fa981f336bd4e4b9150244fde30a2acc42ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141476 Malicious code in dagda-magellan-cosmiconfig-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42085eb6a4d290ae43995ee4eda6a85b47dcbb6ca580e2965afe4b477e91b4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147516 Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5763019dd989f8dbbf267900bfeb1126a620a032c9813daaca52b3a21676a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...