MAL-2025-161621 Malicious code in nabuf-otoimn-igofogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3588f48e7cd8e66bbd45cfa2ec0e545ead0b1b0dbd13af060432c5f9309cdc92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152199 Malicious code in akanabsi-abbala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 804c5c80aa204e617e77d77df2016511ad4a3b1a224dc65f3e3269620f91b51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152431 Malicious code in alvino-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdf84b57b4bcdbde0af608fdbcd457c4fcb66f17493fc487a65049d183c3c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158687 Malicious code in lookingan-namakita73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c927dde8a87b6f2a892c4a91835e1f9943ff20f3b798b4180a319cea5acdb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291be0ddc8f28c64952f15c082f29db949a23a97abe94dab828ca0f32e5ae887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nanali12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263a1015e9c94cf60e0bbf3ee71cf00bf1204aabbaefa833c800583c056c114d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159748 Malicious code in mansida-nomffuadi-munau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d519ddc8b530371ecb650edcc47485bd87c5eb580e7ce7700f46dee755408e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139826 Malicious code in axios-docusaurus-node-sass-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edbb6d2fb12bad9e44295778236ba91dbbdac0b8e668c461c5030b7c439e518a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concurrently-standard-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff872f994bfa9e09bcac8fa5dae43c126048766989a5501ddd911c41cc1fcaba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-ganymede-dependencies-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033aef59b2ea1fb6885746d7c1267fd80de8d5345fe61cf6527714572eb2d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142755 Malicious code in gacrux-chromedriver-cosmiconfig-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882b9247107fb64a948c02c6d307448b291c19157e87e972e947643ece1623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134881 Malicious code in kresna-kripik18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b43df1cbed7e618c06dce8d4fb0b518ed98375f791119e434f4593cdf986e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rujak34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8843bff0517f8d8de385e9be766ac68d84a5a3eef1b12f9d19f839ee53652ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135625 Malicious code in mulyono-lutis68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa88d93acf006ec2ff55da9feb804c4c5b68541e670d4e45fd6401233fec97c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130877 Malicious code in unwilling_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92203e96c9332bab7bdd937a65e6e5ff8df497b720830a4c992bf717845dc5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128838 Malicious code in nana-martabak31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c530474a5cf39d27c58da3f5b8fce5e076ce0d2e659e7a0d7138b9b10c6853f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-sambel90-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76432adfbe9a569e9c923b4ea1cf3f0c41f905c2ba7770f14eef0f89644c1f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121975 Malicious code in nadia-papeda32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b08fd7ee2bb864be26a07968996a321f1fe2d576d86b2d8c067569bf85a809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klanting23-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8d09598c8aab5057f183f572244fcd790a8948eebd9a78bb78c40032b931305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...