MAL-2025-152999 Malicious code in astia-alof-danaipik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210e00c1f5a87de63867d5d974dc8f5411503f8bb0e78c522c53e1d7249b440f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162535 Malicious code in nokire-genji46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae4944960f0056b3095eff5f68b7da4e09a05c431e611595ab10a27b2b1566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160770 Malicious code in muda-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a761c92809ba47ad6780c406c40fb85721b5942d61213ea9c48402eff56dbd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154586 Malicious code in dian-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1711610314644696057932374039f0f21dab8940580d13c3c48720b18aab736f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166760 Malicious code in teaadgggs-musfngi-mifuggsysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc44f6fe19a5190d4fb808e009b04d5918a6af25350acc91a6de9b2509d8bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163707 Malicious code in nudela-aahaf0gf-gaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2dba4f86b297ebb6fe45523f1ea2ce7a7ba5825474f07ee690324338d512ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154433 Malicious code in diago-klp-kabkloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5052086de94350f31392d44658bb47fa85c254cea2662232893fd3cf7ed15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150215 Malicious code in @mipta1/sausdpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb1788fe29a9bdd55da27de92dae0163e7d5cd9b76cb803008273f045e106c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167921 Malicious code in teagood-yakuna60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af5bf38a830c89526f85e035fe7f7c9c96084e7b3e4635d12526898eb471368 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165767 Malicious code in sau-naki-iup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90cd9017b1d3d8375e41fe1f46e05855e634c7f319766ca842a0ded9d6eb2a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147752 Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140261 Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-ora-despina-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a575f4f0b31402aad3a9359cc6ccbee516874d462e15dfba45ffd8d8e186130e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-passport-playwright-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 392e586b116239c1035eaaaae1e6a2af0e52b68b3f756a432e2b33132296b113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-mocha-request-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02491b09b3446d54df684676d132a42d9464b0f5c8f0330438655a1c2bccac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...