MAL-2025-159065 Malicious code in mahnud-mau-naama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b592227bebd196620fe0cfb21dec4263636f62eac70dac9eafb3aefbb762a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164958 Malicious code in rita-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70b75453db92294197f17654561086eabab38cbe28f4c12af5a0faec22a1cae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169465 Malicious code in uafaru-tuamat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ef082721b0da5c098f12b4b40a69cc03c713625c7d48d6478f1d5a2a61e769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150773 Malicious code in @miptaa02/ivdak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8586876996a948ca7c40cef0889ad33c295fd424e11121ef376d188220d5dfc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161979 Malicious code in nasrul-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e852391ccd77893c89d7bdc0d351eeb0bc34e091a37839b0e53d2cdb196b4ec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161184 Malicious code in mutus-manis-naudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bc65df1bdd30f0cf112066eb0e4cdcb3c5b298f26c6882fb4f04b5abdc1f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160044 Malicious code in manurung-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118e93e05759099e68da5911a4b73a4605dc085e3b554870dbd0c6b061af11b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156057 Malicious code in icha-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbf7df3d246291259bdfe77c178175b94f38c80eb270a6c04301eb66c00b20e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159096 Malicious code in mahnud-nofty-gonisfga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f05b62ac868c6449efb18d6f53c4743504bc318fdacfdb0e2023ac6b51ff19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151228 Malicious code in abiba-aluai-aya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c2a3d39482f8e73ec751d51d24538272586188f779d348cec381c88221fab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156332 Malicious code in inagi-vuma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad1b22f8da427cb8cfe59bc7287aed95318eca2fe5450ce0301cc485b5000da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155126 Malicious code in fitra-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4229845ed27d18cdb273f4952462663cceeae86ce93393c7170d5a00435141d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-duplex-sails-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde8cd0c4f31aa574d4d76669ae80f087cec7b7802d04beb5326c07dfc6174b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-supervisor-dotenv-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2714d08ed8aff240d888fd65a138d36e56492e01ad10970dd01de5664bd97de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b262ab41535744cd75ba2de51356f96f98aaba5eefa0ddac512e45ed9ec33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145022 Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...