MAL-2025-157707 Malicious code in kuinsnu-lkui-kagubumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96effd6fa666ffe8db87a250a78662d0954fea2d329ea8ca986a2c628f90e66f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157218 Malicious code in jurss-zas-darss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b734f0fb21659cacd5b4d5e67091cd4672691bd1adf017702bafbc22366f55d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170098 Malicious code in upa-lubalauvalio-ilualsgsdfsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbaceda6520832936bdd3d76e731b8552c2f0f9b9fe5b9db7a02e96af2e4f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156091 Malicious code in ifargfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f646d1cb951bceb6b661956526982538e9540ecd2df401e449584841a4c4f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154353 Malicious code in diago-kalop-kalouubsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 613e0b5c8832bc2079499dfe126c773cbb39550d6aefd5d7ebcfa48ff9c040cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155378 Malicious code in guras-asia-thai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60190b628dcfcf72fd62afbcafa8ffd4cf81aabfbb1791fd3bdcc2626d700fb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164657 Malicious code in rino-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef8cbcb8d3071e7ce41431465495bae98641d714401e824069d92b4360f352fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158106 Malicious code in lina-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f19e715c420ee99b226d3255c39c9c320fed09744afda913af46066057d2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-grunt-sass-loader-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0610d438cfeeac5446fc5869435a197100dedbc6fdb810df97d1eb3706ee54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144676 Malicious code in magellan-xenon-bootes-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62df206e0c637e4fdc9672598ac3b8880e4bfc6880a5cbe40eb17ad429a7520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142388 Malicious code in express-non-blocking-radiant-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6331e367c9a2ee4f71e42bdc54cee6f2118be46b3a3fd2235e2fbec1a7d33c0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149021 Malicious code in upgrade-mysql-publish-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da9396522975edba628dacfcb027f00702370cb1940abecb62f565310e1772d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142318 Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-chalk-commitlint-config-angular-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab9e2517173fa6fcef963c83bc68703e62edc8fc55653176a6511b2269aaa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143307 Malicious code in hermes-child-process-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139181 Malicious code in acamar-ora-vega-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b0f79c6c7a65015199c428f57766f8fa019a08ff82312fb75852a65c8e402a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...