MAL-2025-162314 Malicious code in nokire-akaza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27714d38d9926a672cf23a05978330e15d0cf259011bbbb606329723b6c9970f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164105 Malicious code in pilauka-akababliu-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5422a8ec4fcaa0f777d30c75f55c0682191f7c9a1249ac2ccc5b976b52c2d182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151182 Malicious code in aben-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3528beb5e426764af895f4dfadff63eaeba3111c37a1ab71c5fa4c9ad35c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165653 Malicious code in saku-aiu-unianusiaksapmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66760cf57c43c8fd1c175212158877051c65b486b8690d1f9826e4cd3512945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-adonis-nestjs-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb39ffce40c8af09af9eb6ddb26d2f4ef5c413bf45dbc9bbde30b530839a19e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-radiant-sagitta-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84a0ab09a6df815a8eecabcebbc28db9b5288ca23e5fa3780ee9e790461910 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-atlas-bunyan-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342ccff9c90a37b95f109a686f983a092bbaa10d056793b078819132e688deab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loopback-dactyl-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e705ee7641022af9a53f63bfdadeb16861e696f1ed1e6802ad91b6726cc24e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-less-janus-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9d6033619dd075c66d22a2b5e6f8dff5062b06e279df511f1244751d71c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-acamar-quantum-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b5c9916b04c82c901302f7b2133140245aff21e8c829542aa208b5e2af2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146063 Malicious code in pegasus-vulcan-framework-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49c20d826fc3caba360e82a06dd11069ea8cb60d4ffcfa801f351b1e7f5717c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gandul80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb0d85faaf693a8e75828beb37e2c48106eeeea1215207afbb0834e235ac676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-donat12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32da3d6ef4265d4d4618adbf11d22d961e5771c1cf7d86b926b38c0506400991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-empal77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d90e942d124df0b4e4835ccc42e567c5ae67d0429631caebf11e885af8939e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3409d039eeae7e28517fe8b8060c4a8943ed1e0eff8c5b4c30ac440d0250e2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134139 Malicious code in hendra-lepet93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e309cb946d8686f0b7e176001443a8fc50e1d2ec6d421f8f521573bd99d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137663 Malicious code in utomo-rangi27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8740d8cb9a28bf4a9187a5d7908dfcc2349449f67e2fea765f7e21168013e3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133269 Malicious code in exotic_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c69592135f72461edd1b5dd54f364642d5acb7aecc381fc93066a9cc524c5b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...