MAL-2025-160384 Malicious code in messi-urat-disa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48eb8098646aa0e2f0b1add62aac99707ba38ff88071fa58f19bb60ad890843f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160729 Malicious code in modirai-imgono-jinmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b8187970bdda132097a44fcf7e7ccdae3df31c75db282b9662f64efbad0131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168727 Malicious code in tealove-reborn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 846e36a4c0235d6e0f4cdb1139721213567648026d9d76dd4ed8449a2b26592b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc738819e624c0c6d334d661ffc767cc7fff6e89830698b2a71644be78526f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154625 Malicious code in dian-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442d76e901acec667901b0d1c13eefc9e266de805ff706718cc7089ea8e61b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169087 Malicious code in tehnah-codifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95921c0ad2f30d62e38e0f59b89844e722b88631e1514e23d3958fd8953dc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163714 Malicious code in nudela-aahff-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e39651a85b4ec7e68ec6cf539dbf1a3bf52c2a5dbfd8ad55ba1833e60e3508c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-nautyt-minahas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a32646191fdb5229e4e00e2c6df2f54a17efc5ee90409a6bb98b30feac76a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0fffe499744327b3ccb7ffcfa64f4c2479a1fba276423d182edc8e7ab6c30a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152796 Malicious code in arif-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ae3d30e498943380f214e38ce90ce0abba70d986095fa4817bf4045a153c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150646 Malicious code in @miptaa02/fhgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924b2c30ac746ff2b42b59fc6b0acb89b4679be8cb5b97f10dc0556c08c6e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-ganymede-cypress-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd6e41a91413ea14979cf90c42cbe9942a3e2691daf8927c8158eef192882f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-ignite-carina-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d58af40063be0cd212eab0096cb411052d426f2505714f8cdd21598a657b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-xerxes-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69951ea3063a19a4b6fdf535ce96895993a9bbc7b93ad9729bec801aa77fc0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141085 Malicious code in convict-pulsar-odin-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5e10a1e80dbe898a0eedbdd73f7c13bbd6e948693740434284cc0d8da36917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-node-config-charon-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbaae974f522bc9d450490a550cbf10ae06f437364b076e1db60837253cc504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145642 Malicious code in norma-hermes-javascript-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3145239131249d38911912839b909da09543c4d79debd3368f5ea461512c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138746 Malicious code in furious-coffee-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f34ba239c827981f1b70d30d1dc39eda68b32d6e379a238557ae9cea6fc1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...