MAL-2025-159365 Malicious code in manadsi-safa-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8d1bdf77861119776707bb7d130a3a5c9e071416016122438af095cdac426b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amibn-aguhopabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2199c4ea38e978feeaaa9793a15f84204774da8843c83fbf52010a409a411e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b5618455c3eb214733087727d0a765dc2ffcaabd37b766dab36e39a9ec285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6626a35656cfa5139ec4514c0d22e4a2b4744412917e92acfad2a10eb71d8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155235 Malicious code in fitrok-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39ac057a1bba9b75aec2f7b3e55594db2a8b3c9a6d0369dc95bb27f0e6dd949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165043 Malicious code in rival-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06ec67f649693af8b7a6a82469c0f34fc061667b8f26feb1b293701b226729c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161474 Malicious code in nabuf-otimn-gaopsig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f877250960fc9abcaceb235af38bcb71d88ee9c5a47ac3251fc8bed69fd7f6d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160847 Malicious code in muklis-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe97a06a7264871c7b180742be19757aa440adeea8fd787ddce8d152e897232 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145413 Malicious code in nextjs-dorado-postgres-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfecd304fb29e3151b62547d5f3fb6dca1cf7d3e850787cf00409d38af9b09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139704 Malicious code in aurora-perseus-publish-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1914b6c4e9180f53b91bad06b1b25379fef2eb403398388b7a0665a9004acae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144488 Malicious code in local-hydra-lint-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b2e5960bce8d385d01b183ea5c0ca4d1c4ca826535303e7e7c7c94726b6e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140627 Malicious code in chakra-ui-scripts-procyon-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deca403d973cf24a4f66fb36e71f489da94a83ac29e15ce9fae18fc46d6f6811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-mensa-pegasus-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6274e0f858f97043c8cd0e74ce41041592cb0380610d544e1ca666521299b7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-element-ui-webdriver-mocha-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fb8bda20956643577e8a635c72bc21feaad66dca60d14fb62e8f6be8978c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148636 Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8cc6fd533950ef5b378f16b40b3c8fb9577c5a2423c4c92ab9c4bc23264c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138986 Malicious code in royal-beige-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076b5851dacf23aa7952819d3faba5c101e042512f09bd607d2e86d9502b15d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-nasipecel69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bec5a26753a9818113765a152ddf842d2a0ee80bc0f6a540fca783b0dda361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kupang100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cfb30cb92b5f87a1826a0ca9cb5f9ef3b468b03727d823eb9396ba76cd9dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...