MAL-2025-154255 Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160864 Malicious code in munidr-nerf-tersd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97a31d9ccee1a24af86824f292743d39c3ffc7ac8054ddba6bb403a7af5c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9192ae2662760f2eabbdc122df15f3e5af07f07fef3cde4705b2a91bcdb19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butsya-sdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b03276796c61711ead443b46a2e243e0e3a057e1815c2eaccab923331be7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc21310fa7ac1e2f7e0622e2d2b730497b36ae0585a3bdb92aadd1ec40f5c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169242 Malicious code in trevora-cir47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe6ff5ad14b593aeb7df2917cabc8e1d47acaf240b3f087a100c739aa77d89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163102 Malicious code in nokire-namiresan49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecd7d8d67fa23b40e6b99cb2aad7cc26db6abaa73be0924c82324c2a074bae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166956 Malicious code in teagood-lokika87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff94c156c50bc20ca85e81962fa04191721d0c8dfbc36af2de8037c52dd2e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147087 Malicious code in readable-ophiuchus-heka-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52dd611f8a0d7676f559091a9d6c98ca521a5d23eccc14ab60309143fdfb3fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148271 Malicious code in start-husky-nightwatch-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20316704e355b8f90ebd7ca6957fb6a2bac05276f95761d8281561f3a11757a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140720 Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df071dba98f764582ffc7959b36e91c0b59f2b7e8b79a9a8eb26b36655cde881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142008 Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-miebogor79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7dd538bdee92ad66d06ab2f444bf3ba7e7241a07eede95a4efb0b624fad37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-gulai40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0f24eee1406845b1a9cbcf67236037c9d24bdef02f2cfc99cd4fe316f46e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8f3f23c2a8d30e2789ad7fb12319fc49eb8853dee8adbbd5cbad9bca1a4f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lontong20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8b7ed5094033d59c8acdffd0fd49e72bd4182232df335f8f5f4acb6e443efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...