MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusagagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12278883a32f86e6fc32bb6e76ce442cd86bf962ddca1a4658afd51325e96ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154734 Malicious code in dioalgo-kloip-akaugakui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5545c5571e84d2082a6ce5d8da5e5a8e115a12d84c9b2984a9e36dd0551b07aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157762 Malicious code in kuinsu-luki-nasunbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710149f6e315741ba164675b280265930ce96fd1a981b0783269e2002cf97a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152776 Malicious code in arif-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3dca87d6f89196ca267ba454971461b2a046d40d61cced64fe34440ea0562ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155619 Malicious code in hafiz-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d28a0238fe7931e5837988ee95993bedcea50c7223bde234a9def0ccef22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151242 Malicious code in abiba-alvabai-aytabauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f96de5325930e9aa32f1bf31a7f22f74bc2b75561c9ff074737f5bc7da8b659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161779 Malicious code in namadata-munaroha-nadgfamfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ee610e02e254b2bc748a070e7b373ddfc6cb545d8e339a58bc9790eb1712be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170312 Malicious code in verify-ain-ukasiamunisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca45bda1d477af173abebdb517e21f4deaf43d14def63dba8f5eb966e749228b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151284 Malicious code in abiba-avin-abu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30a34db7c8ac3da91e5d1656414d61448ff45e267ab93fe75a371b6363d253a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152012 Malicious code in air-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b8fe28dbba6ae8d98728cb188c25404339385bebb25b7ca73aba0cc30e79ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c1336a92cef831b978e2a49a2b462c80074ff66f86efcfab01e4a980d933cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-spectron-less-loader-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c1f15bfa8b9ceed404f696d7d67708cc87536091aebab7814c7dfc538e968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-nodejs-callisto-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d4b3c48e3954d039f5750564c51a3770ddb40213511ea03f125880717cdeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465e2d206b79153b87e7ee11c402e73cac24432e0d5be4983711cc105753fbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-tailwindcss-orbit-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4085287e53cee21a1b2871fc6302e58161bc1d180e0510e2232091f732f96c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-sails-postgres-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccda79e5a6605a50c4985137b86b3c5988dc6f909bec3f1e70b2c7595ce24df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-concurrently-process-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f20f6ca0676e9eff129a6b427fe940ee7a2dfa15373c2680bc0f47c155ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-elara-algol-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd5b0453b013f59be9fa1f4de877ba3900d709b9cc706e7089493988f189d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-auth0-blitz-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...