MAL-2025-161638 Malicious code in nabuf-otomabin-nohkkjgau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52af942de3c000aefa62482511c062dc3d331ef5942496de8ca79fbe825449f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166101 Malicious code in slamet-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b7497b7b4731adf26ab8d4297fdf4727fa5e9b73808ea3319fb904d609f9069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfaddia-madida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9740a6dddc8b5b084478bffa8cfaa6727e0b760e51f5578138b9379a23b5880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a846201510313bd8ac2d7ded2f5061336430752f69da458fd429307f2aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-shout-current (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6309af85ac43ce323e7bc64517950d273299ecfb8ec69353c1bf3b9a76b4580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160996 Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150847 Malicious code in @miptaa02/mqwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547b37dd2be5baf6f508b06012f1b5995d9fac79aa4b7145703a4e957f8558e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafida-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3892c80dcfdb49b50f1209fb1ba94300b8e678d479cfc6168cd7070056f625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166725 Malicious code in teaa-reborn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50f973050782989f9bd2f5672f22dc82484d75e9328f96e370e37c4e3e49705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161327 Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-rocket-vuetify-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d561aaa05ed4922293b5ddb3e2defe3f7e4d1b2e9bf8d593380104bd3a72fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-perseus-local-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89edfd1d9823ff5760892e24d7c7e222e5826fe1bd7fed01a812dbdef635600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139276 Malicious code in aldebaran-fetch-node-sass-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2879d3def66a72ef1d6909f23252125f3bc1b2ded6df7f86f4856c3ce31a567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-adonis-native-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6b2adb2024fc786ab7d03d9c9e3da8107a9c830bea338dd0148d6b47c1e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-janus-ultra-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce60c2899113f623d8c9ab82a028b70ed0b619eb59c01a6c7eaced7111a8ae1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-andromeda-sadr-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c25d29d91f79f19cbf57e67c5c4e2b0a700835050ceb880fa502657636e89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...