MAL-2025-150439 Malicious code in @mipta19/sdd-s1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac643b4a4e261623aa3edca5c9ca11201f7e17975a7b5300d41b7da9a92a13b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168772 Malicious code in tealoveness44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a5494e6d9a0673ae12cb85b26c690069df29d25bce8326e8f62564c4ae5810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154586 Malicious code in dian-poke52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1711610314644696057932374039f0f21dab8940580d13c3c48720b18aab736f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154834 Malicious code in fadila-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90e2079d6201e8356a4f88cca2a80b79cf34dffdfb05f39a6cab4b9fcbbbeb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163707 Malicious code in nudela-aahaf0gf-gaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2dba4f86b297ebb6fe45523f1ea2ce7a7ba5825474f07ee690324338d512ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163999 Malicious code in parwo-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223641d697a0a464796d6eae1b61e4736f7d209f0a42c65a7736e534feed5251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161620 Malicious code in nabuf-otoimn-igofogaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f614a184b29be5169b1c3c840c5036132b3da1da22183c8ab898f826cb0b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168384 Malicious code in tealove-naiman45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a59f60f0bf426579681965dbb8bd5a565dc548758e188b526b08c91d79895c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161407 Malicious code in nabuf-otgigaf-dofajgaagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f948272e8be0b55fb3d4986b7b79d27076d81c23cb7dba1b4fd5c4fcc4b13a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147752 Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140261 Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kaus-eris-regulus-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdd26537c10b0709762ad5b79a09aa551a46524eb4716af1b162bbcfda4a492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-event-stop-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6630ad4ab8d3fb3fa9067999a33f750b0497f8ecde88df05ef9105eae291e79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-callback-xenos-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa94b81da2f4a6f4e376f64baa173570ef405d5befe2d774868143eacb0c594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071d87b05998a03cb70ec6cb8b456a568c2d1826fa8723063940c54ca424a885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-xenos-spica-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0918ab27f9677fa071f80bd9e201bc29d7d84c5086b06e1819e9ef05c5c31882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-uglify-js-proxima-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83d685b38e71219862b3f5fb5f01316925f346f1d118d676e8a18d2cc82c2b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...