MAL-2025-163501 Malicious code in nokire-zabuza14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662966eda0551b2a9de4ea89258c736495aa34127f36d3a3fd457fcca4a1e886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167156 Malicious code in teagood-manaki87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50d37e36203071ed73c4741617c5788ad2be55816bd2ae5a718f3304139f439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154065 Malicious code in cinta-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162568 Malicious code in nokire-genji76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f181173e01defa63f360be09173bb422dcc3fdc6fde38c27f925f5d36271bacf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164284 Malicious code in pitra-16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284e0332399910d6c8cc2156a5d8cabbfc9ee08fff8aaecfcd4ed2ad48048600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155485 Malicious code in guras-visa-koreasela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6ab02e640108ccff5d2cc336972b09e2bdb824ce95f8dd152da086f6bed8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164235 Malicious code in piluka-aluni-pibali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12431c763ee7097165061c42326706945ac5dcf81ded4aab33fc8f9d5530e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164340 Malicious code in poli-aki-alai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3767b172972d4d77671bc776ec2ab0a0be3717c66ec308d04eec3a06c8c4cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155947 Malicious code in ican-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4013575781760900cb3d1c5ff997fd8e9a862bbecf6217f7defa0776cd783cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170462 Malicious code in verify-tactiva-mechan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4328c65d85b9c1aa2f620c358ef6bc3dc6df5cd00ec6ed07ebb529695d6194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162606 Malicious code in nokire-kilua2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a46df2e7807350e98b3ec7732aad6cde656286a50bd109faaf1492abc2ba08cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70532487070f2a0deee8b4bbc1c74cc67b053870890a96f56fc6f6daf60b7e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-private-phoebe-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e39b17f67223220fe63d32875adfba39ede6a56f0af2b1cac86d9c7bdb1d21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-spinner-gemini-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746ffb5d26ec0c2beb4033b4f6c4859ebbc33a46b29f81cce2bc4daf1967c915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-registry-andromeda-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e537ce0a5cc5e46f30d717f43d4ff0980a85f8ad7d038de681d111fae1a26a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scripts-got-electron-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0deb3a53c9e1b3939399d6390903d0a2e7aaff72828138dd64ab8bdb9773c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-nextjs-playwright-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563051be1ab409d07dbe8c4deb9edbe396b53845dc3747bb1007c2a25abb8578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...