MAL-2025-160881 Malicious code in munir-butya-mzisun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fec6f55125f26c92bfb8481d4efb2607916eaf452accba3f781475a29f3719a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162026 Malicious code in nasution-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da104221e36a93f06404c02f324f2f2d0cac8443fe0231d50b2068eb6c51eca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167470 Malicious code in teagood-nalikami68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6411f5f189b89210b40685345d39ca6f6a8d8032ae5b258ae4c38fd02ed3fa5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163331 Malicious code in nokire-rara42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adb3fbe78dcd84c3ddcd57a82b7e8f05bc067e65c80927fdfe678553d24da9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158662 Malicious code in lookingan-namakita50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1ee83aa55117545e9dabb44f8e373234f3256b14b2767defa212c349c79a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161786 Malicious code in namae-nadua-maavwr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e02503797781102d77ee474a8d77bb623e017dc5c2fc7f74d2ae69e725695a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156008 Malicious code in icha-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf34996fad6689e528ed366289df80066952bc5e0c7be2820443016c2275ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150141 Malicious code in @mipta1/mikas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9731ecbf09392f434ca9a57efae9b07bd6704746b58dfbc2987d47e4d585d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165190 Malicious code in riyanto-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95a0d769dba7e1aa10f82beb0eeaefe9b0ac77da1c7ce09cdff799350428798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156292 Malicious code in ilop-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d6d253741987c6ce03735fa226dc07885df2f7d3ea534f51957a4c1a9a4185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168895 Malicious code in technical-alobiko-taovlanaiban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053f641b2bc8bbf5d38b49803ad5718aa8c6a5a05f998a2a848bf24c3284418c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161162 Malicious code in mutr-ssdads-batay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aead91aa366d7ecb3ff2f135060b486e4163c3be72ad8fa0ac3b4b6b3a448427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca1fd93296551c523ea41407b98ea746afe18e970e55e894d1f83b0eaa59303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-hapi-webpack-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-hyperion-fornax-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e03baf6447776f6d27d28c510f76e3b0afd0f980a31042f178907116c3963b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-stop-terser-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51be2fc585f72ac5e1c652ece518c196302ce3e5048abec0a7233a0cdc0b4fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140564 Malicious code in ceres-eridanus-eslint-config-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de73cf1a1d051ede7b2b4b1f0b8b40817f132d64f0922bae18b2a83eed940264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-markdown-hapi-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4e9bc0187b1ff61b66ba57ddd7a30ce8d3ad9e0fee1b75f97b22b698a286c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...