MAL-2025-151532 Malicious code in abu-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ed22e94187b80df6e63c50dac637498b472287879f059a02631478fd6fcd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154292 Malicious code in dia-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42372fdb54c843b791f7713f6c8f2370821d4b643852c7c179fbc3fa1d64015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165273 Malicious code in ruji-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ce3ab0e51f4212b9deafadc79c41fb13a978ac3e0cb2c780ceaf5414cae3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163660 Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163305 Malicious code in nokire-rara19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429570eae46cab22994083e750533b8068e800fa2fc0218a457b0ead80305201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159926 Malicious code in mansioda-nonatai-mutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e403436eb42b9ad7c801793cfcf537827964a10276747e6fdbd8da51138b41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158017 Malicious code in layla-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c98c5b221d68a13ee6ae678d9687e436b074c282caa53c30dd04270544f1b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153800 Malicious code in bintang-tea9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae65027d94ec47df3abac2f5f53dcb67c79888bb9d28a6ecbad244325d9c131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162604 Malicious code in nokire-kilua18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7884585f9cf0f3ad474713e32443f653bc2a5252b09ec5618f1db8e5616766af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156312 Malicious code in ilop-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a35081871394befe6e9ca9aa5b2a1d4ec5e953d09d47d4c571ac9ffdb76482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158317 Malicious code in lookingan-konami55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aebafa2fa3ab34e9c7ff11b3a2e7408069097655660d2b817c46524b814efef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150779 Malicious code in @miptaa02/jisfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e05a239d626f459581b846cf822389a50d1d1d24ac39a7d32eefbb20f9754b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehnah-nati-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013ab4cde22ba06491078b37121aaa17f333d79b4f63df77ddf975f55ed83294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-toml-iota-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c32721632d64f23304482bb6565212889262dac6c7be4198546fa527e9be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-request-triton-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62cb2f3006954823e7b08f5666c84828078218140f25f574396afddbfc06b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-dependencies-janus-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d1191b9c0587f4ac87abc4b66593db335f11933cbe034825bd1227e61287ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bc6f143e9582b48754cf9d7909df4b782c45d7c78a1fd54b06833089bb3c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-io-quasar-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463aa37c4b880fa305a254100385206be26e5f5ddb3ee65314eb015fdfac0cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-tailwindcss-got-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfebaf96f22fd8860a88ac0184b73b01ba60142ae6ef17a441f56736de49ec77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...