MAL-2025-156091 Malicious code in ifargfai-igafo-jag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f646d1cb951bceb6b661956526982538e9540ecd2df401e449584841a4c4f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168642 Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154786 Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167576 Malicious code in teagood-nalikoli23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c77b218072691559c77e77022422aa011f2ec738b5d3400accc22df4d5627e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157079 Malicious code in jimmy-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89b6731ad2298c3890eef9a64e9695aeaf840517c45ebfb279d44820293552ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165638 Malicious code in saku-aimau-uunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e274cd665fe167ab867976105333eeb03138560c9114165cbae78e7d2c0e835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153002 Malicious code in avh-afgagafis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bcbeb5eeac2a16e068b0de60de526fe8e3454784143027d41493cf0da8c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147661 Malicious code in sass-loader-callback-oauth-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212c3f3b0e02fdf86f047a32b47e085f6d54d34e5a3f94920acf5f2c829da336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149021 Malicious code in upgrade-mysql-publish-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da9396522975edba628dacfcb027f00702370cb1940abecb62f565310e1772d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143307 Malicious code in hermes-child-process-event-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca93f163efe1c3e5aef570b5278b355cc483a6872c9f8921df0fa1197fa4f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142318 Malicious code in event-nightwatch-stop-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344a8f3d8e3297fc8cc6ab9afcbfb139ccb0c4598a5bb32b378d352d81064bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143205 Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sadr-stream-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340278f68496efeadd003e04f84c930a752735bb8c48821c11ab92fb0fb0c98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-development-deneb-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82414a4bc96098b86bd55579ab7fe398c1e9f770aae7802ddb2a096f2dbfea1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-react-bootstrap-dependencies-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353beecfdeb4819086c6f961d70183613dc65b776ff461dbf29613f8ab84a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-express-prettier-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3469381f893205a4b4ef707f791d019e2f28b71355022db771346399290b307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...