MAL-2025-154173 Malicious code in dajouka-faa-sa9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a44fc865febe301b0e0725554bbe5978e5ece62968c57d6f91cc5ddd7254a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152999 Malicious code in astia-alof-danaipik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210e00c1f5a87de63867d5d974dc8f5411503f8bb0e78c522c53e1d7249b440f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155008 Malicious code in fatidra-nutasyua-isaufy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7da5494e48e6fadfb6b6b1775091eea12da0b78ceed684beb63b2968a665c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168322 Malicious code in tealove-lady17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824f319b828bf636cdcda7c305da599fa52f1e75950e7230a4a9b5432de3db2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163395 Malicious code in nokire-sekiya1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b89d2a9f87113bcca99fbc43c95a87fcebcbcc3f5516cc70def277e55f9d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164604 Malicious code in ramadan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb414a4e4f3400f26f913e17c2175030b1acc9ff3e98720adea013d3f61db31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169548 Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163839 Malicious code in nudela-rahfeg-hahgsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3daf0b13b3fc29bfd620ff12c53f9b54d2d182cf9191c5b6ac76b4e52d69f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154553 Malicious code in dian-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50671a67bce851c5090999c07f698b105f48c2a46cebe06c6a7ac0d9ab662be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155483 Malicious code in guras-visa-koreas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138a23e25d6fc65b0b2b5e7a08d64b289dda5e1188e8e0824f8f989aea990c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147752 Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140261 Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-relay-chromedriver-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096e192a224e6245da34ac9aaabd4b13fbd2de99af1246befa43a62dfdb33cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...