MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151284 Malicious code in abiba-avin-abu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30a34db7c8ac3da91e5d1656414d61448ff45e267ab93fe75a371b6363d253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150672 Malicious code in @miptaa02/fshj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2930924b90de23ef79484abf8e592c084d7858d17c94e1ebc05a12c5ae387d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154845 Malicious code in fadila-poke112 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b0f6e6b541e5e82c51909928caef30310b206438c7b01afc5fd2b69e057f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163789 Malicious code in nudela-ofgaf-gaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c82c6ac670ac8545f78e1599bdb75e847930e8a5ecd64f692a0d4baed139c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159434 Malicious code in manadsi-sfadia-madavt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35e102b84659ed7a483e73e867124640cd92cef0e2bc7491782e31bdbdcba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164296 Malicious code in pitra-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe879e5a76f04f2047b16dce666cac6a2db11712f1bf28ce6e4e71779398035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154734 Malicious code in dioalgo-kloip-akaugakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5545c5571e84d2082a6ce5d8da5e5a8e115a12d84c9b2984a9e36dd0551b07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lotsi-banavali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52bf78c793688fb3c0ef5de4709413263a1aaa0c3f841ea410e33b1cc285649b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160030 Malicious code in manurung-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c6af0866d8eb561fe628f507123a4b6b772175438dda7481d19a80ca57e0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156273 Malicious code in ilop-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8e30c41cc7718e3449348d4898e4a98de50b7eb98ab2e1e74ba8b8c7317179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namalaka62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec4118b37f2a9013cb0b228c0aa231f6a3ae58d837fb041bfe1c5dfa61b77f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cdd6fd77c1cae9a437cd5bd642282b813a08cc3826fa783055b41a5c2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-kastra-procyon-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c77b2bd364074d4e5b2d077f512fa8b7cc09f21f2edb00ab0d1fdd4e81028a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-bunyan-materialize-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafd16f59961d7f0089c5ad1a6a43e4deb50395ede6d4038ed260d6143ff3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-cassini-antares-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c926c6238992b2efa80955805e330ca4559e9c8936091d46b8f110c4539464f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-charon-server-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 925ed6bf743b9330633d7e1b1686ade91f9fa24b0d26b3f6fe312522b3ac9d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-meteor-start-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f41c156800172217496004b04bf2c1dfd2ae71f2073b0ed785b6ed6984b299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01be8cfa96e4044e64f8c668c0d1417368b0897ee88586a73bd7dd7c873c629d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...