MAL-2025-160996 Malicious code in mursai-bdurt-sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b285b395afa0339a4acbefdb72bf1b8b5013ccac5a9d6e1cb84d61973872e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafida-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3892c80dcfdb49b50f1209fb1ba94300b8e678d479cfc6168cd7070056f625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168059 Malicious code in teagood-yakuza96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c88b57e0a0db07ab3e9d0e04b03fe38fc6582973f9a0bdcd7fe87927a561a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166725 Malicious code in teaa-reborn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50f973050782989f9bd2f5672f22dc82484d75e9328f96e370e37c4e3e49705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161327 Malicious code in nabuf-ogauof-dofufsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99368d0e092cadf8156538f9f098cf57f9188bd6cb7411242c8c56c85f3e3533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-perseus-local-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89edfd1d9823ff5760892e24d7c7e222e5826fe1bd7fed01a812dbdef635600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-rocket-vuetify-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d561aaa05ed4922293b5ddb3e2defe3f7e4d1b2e9bf8d593380104bd3a72fe0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139276 Malicious code in aldebaran-fetch-node-sass-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2879d3def66a72ef1d6909f23252125f3bc1b2ded6df7f86f4856c3ce31a567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-adonis-native-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6b2adb2024fc786ab7d03d9c9e3da8107a9c830bea338dd0148d6b47c1e442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-janus-ultra-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce60c2899113f623d8c9ab82a028b70ed0b619eb59c01a6c7eaced7111a8ae1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-andromeda-sadr-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c25d29d91f79f19cbf57e67c5c4e2b0a700835050ceb880fa502657636e89fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141354 Malicious code in csv-pulsar-hexo-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7aa4dbfbc4d37f3551bab23b708a86c043fba750ff0f018e4c7625657c948c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149263 Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gembus53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4bc771a2d8415b32641572031b5c96664022d9dd1865669270fdc74a1af98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138250 Malicious code in yanti-mangga99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa84f918dc7112813ed45d54ddf18966e244de3a22c1d0fdd403264e3c39a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136470 Malicious code in qori-bakwan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1196676e534fd86325bea63189ee07e97d5915f37cd8b0821f7ceb97dacd628b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134077 Malicious code in hanafi-lodeh26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2113c05541b4268dcb623f5eaa203282870dc911a4dbf8689c8e921923819c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...