MAL-2025-161817 Malicious code in namasae-naiua-maiso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f92b8b0a3bca85d047b2557d1586d5926776ba1552ca538b8e3e0982d6274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiari-agomoidoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2600dabb9401bcea0a5af264031af8556bebf8e1cc28bf37e0012ea67939ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nar-buntal-butya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c457450e0f0dd69e4020f23b341f42c8efc462b69f63e4f41e6851f84780504a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uyafaru-tauhauimat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212f47a4333bd2c49fffbc486ca47217decea0295d54cb76e0838fda2798a6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170479 Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167539 Malicious code in teagood-nalikoli13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ad662c3a9d825533b26d595326933b9900e7781ecc52fe774564665e6aa4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154874 Malicious code in fadila-poke139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7db8b4e8b722711233de1e03793e6703d1f5e99a249a87635880f8a5f052f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165563 Malicious code in sabuvauakli-nalabui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276344e670ad8067b4889facd9ddbc14d34da951972cffaf58367fbd2fc52c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160746 Malicious code in muda-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78ae43210f5a99fe7a2867c1f96ec5e4446ed357262114050278b1e97435e7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154478 Malicious code in diago-kulio-luookafaumauahkai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2284c331837f437d905afc59bb18ef5aa1a5c8640cd12fd0d54ec45c42b60924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158725 Malicious code in lookingan-namala16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcdfbb27aa12b40cb9b1d3372e24233787f075a37f48e0d770063622af3fc55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ntaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8595dddabe65c7e45824d51f7abe499d52d80ade7522b580f5c41636c409d82c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-tiaala-magolaaklani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a158af623b32207c831149ed420bbe6d5e1828365a8188eed3546e16eca7b0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163013 Malicious code in nokire-nakala59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0f8f3826c35da96eafdb6674faf96728e57ce1746cf3dde36b78be49fb87f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abel-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2442f2f96a68b7c42ff825ce5b6fdce320b2855116a5e34e14a91e16881192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147745 Malicious code in scripts-quark-antares-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf4a6dba39b156ce3c014140ded3e32be802ee8526b3557b23172727a7bac5b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-configstore-blaze-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ef9581ec039be05c2e51e371aefded911bbf723162e1103e5cc9b7d919b95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140804 Malicious code in cli-node-config-eridanus-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c9e5f61f95bfcf4d2b38af3999e0c0645e84cb36f4d520d8df699b673e6970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-quasar-io-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901fba8e53336890c2a909220698dc02d13850830f1b1fd4621a31308f933e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...