MAL-2025-167077 Malicious code in teagood-manaki14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b916266870a087fa9108957c5f3cc8eef31dd4ac5e57f147bfc7b505ed6960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157716 Malicious code in kuinsu-lki-kopanunataiabumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bb09cb95e020d9e40f396c4456292c758f330cf52e7de8e5c014e729bd012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159573 Malicious code in manapf-manuta-mantasuaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78bf3ad78bcfb76e72719eebc1ab034de572625422c1dc9764a707ae31ea2eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157182 Malicious code in jurss-gda-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6551b66616ff501446f2ddaf78f47df74479dd0d6ea405a5b5e672fc49cd80b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede4feaf4eb756c461057c41417000cdd75a06aa5daa789831adf5e755238674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6995b43d21ec7b8452ad66b58fe47ceb803a5645e7343a40962230c60892510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167011 Malicious code in teagood-lokina46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307539ae32656aaae22efbd3c01fdf32e200b826a00ef3ade6de9a05436962aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153099 Malicious code in avminah-fagias-fimaii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce2fae6a67b7f319b7594762eee721980dcd30906928f784102ec2e2cf89cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f189e725a2d82d3c7d71ab5fd60956ac390d0b896a8ce7eb49b3c220a0799fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166795 Malicious code in teagood-cuekin30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376b8dcd18784072a7c9b030a3ab175a1efda6a4dee34d18852797fef966b77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158758 Malicious code in lookingan-namala46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bf2e8ca6672ac9d33e0348d3b770631ec5c7c3e624bca461a2dd74c9aab18b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153546 Malicious code in avomainah-frasu-ofrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569bbc6bf12fa10fa1bb519a52f0b3f06711ef82d821fa293bdf2a56a80bbc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-sync-stream-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272ae80d612727261195a18032ef87b80a908a41c49a641ecef28bc5ce12b63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-janus-nightwatch-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e0d21c5ebe18126909d8f13503d3cd2e944beb10bcf2c5888bf01546bfbfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-nodejs-spectron-webdriver-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d909a0b8a65012cbd4ed15cd892115f1d939bc275716f29f577f44d5e0d6476d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-readable-dactyl-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94388570f96da505278819c6e146b9c7c3d8e2e1288e526202fbeaf4fb4fec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-electron-algol-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefdcbff234b32eaa809ef06910becc75ac6bd245a7a811a8ceb9c68df4b7ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-prettier-stylelint-private-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf2aae22b646299d21e91bd273adb23525d3c1776f29b1dbc9f43e9f9a0199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-delphinus-ganymede-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7df939af27356d97f9a5ec3f6ee7e607f3e002848db3d2eef83a06a41ac34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...