MAL-2025-169055 Malicious code in tehah-nuyadtasfag-amadnadsatadfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80eb815a737d69bff5540f04771fb252d8ebda2ca867aaeec4da6c2d2da17171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152107 Malicious code in aji-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678bfd4339e164db8bca2f791037b02b2cdfae443386bd0955c772c125354bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160142 Malicious code in masako-be-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398fe1098bde6f56dc07c7540c143ec5e544478a184bd8e068c6cbabf1eb461b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153534 Malicious code in avomainah-fras-ofafaffau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c70692974bedc28d362b4f5e6dc59e761f646409cc365864adf8427362fafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165576 Malicious code in saku-ai-ups012ugiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7f5141c78f3317b441088820e84f281a09838ede8fd9d848306bea96e1fa2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168274 Malicious code in tealove-darknest19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d2c17d227da8065b23b95224721b1a67cb90c40c0ce1f94f0a08da3b849a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162275 Malicious code in nokire-akaza60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9668f9a0fc72187fe120ca6038683f38b7f07978384d83c9c1c08b755cf422c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164727 Malicious code in rino-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a651add57774e07d461650d3734ddd0a22b37924dd11f85cbe702603e00384fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157279 Malicious code in kamasada-natib-yalufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdb1f889d5685263250b6d38c6968603e63419a1d977ef3e04a4d4a93356881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160230 Malicious code in matane-rasaaya-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9ec5fa8537192b7f2b69026ddf904011a50aee23f06977ad9582b6221fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-cordelia-mutation-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef328b1157a8e232281341e6c108f91fd45825a6fd360ba22b433ea28a1f351d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-less-bulma-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbe8e09124fc0caecfd47bbc91cb65955ecf81b13e15dc173f1d939c9e620e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-start-query-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-spectron-webdriver-polaris-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b9ff97fe536b1a7c34d7a66616c0c17e2c8256579695b9bc28f5abf6d95e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145615 Malicious code in non-blocking-magellan-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3558b6b1a1972905e34cd4e0a792d129eaf18c22c5621bafbe2d68de82f493b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141856 Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141880 Malicious code in elara-jovian-fornax-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed95b350509780214ee5d0444817dbb4ea752696906de6cfe7c4f25f3361764b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139460 Malicious code in antd-loglevel-triton-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1fd01320a90acbedaabde228264716f942b3ba95713dbc21b187caaa492d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...