MAL-2025-159726 Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150467 Malicious code in @mipta19/wjgu1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9a3ad7dea920e0d9ca2e72312af752b7ab1d1456717cd9c44d888529719812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168599 Malicious code in tealove-okta22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e5d64f6bdd024f8b833aab463ca039f8634f7c41a8795557eb93e83029cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164545 Malicious code in prayoga-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efc59d0ee0bdb45e498d56653ea9dc4275210e6a35df14745b3977ca0424399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169812 Malicious code in uinsu-lisa-amaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf07d4add7903934483d4a865a7e4925b03388d4dece67d85d7a6cb75e2e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df66fd3043213adeba0e34e0256b23b46eb17daa8a42d23e4d80a00ba321b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153539 Malicious code in avomainah-fras-ofu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0825ea9949aaed0b27e83b71a3c0eb18cd560bf4aa41ca271d98d77fe835e81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154794 Malicious code in ewa-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d33fd3f5b37dc357d5ab69aa44a30d9026f9141c2a9ed2aca06f2b66478c45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155693 Malicious code in hariyono-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb701e091c159aa4a1e60ae36d4be1f679bc7732f54fbaefb121bf07b3de3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168788 Malicious code in tealoveness59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76bf3ab8aec3636da18ad0d912844665501ad16cf9c4307ddb951ff3e762863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156141 Malicious code in ilal-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928d78571e97b89a2fd2c6ac2853f6e735f88d62aa60a02fc7a5c5afa019b8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-jasmine-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dfb0018bc45bfd3c2860fceb53ca07e74683afecd202d9deb97e51a929500f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-json-pino-pretty-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea561973f942ff04defd609f3fb52d9c8621f6f6b7699c398f4edb048fb22bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passport-websockets-apollo-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181d5bf8f8e773b12665333b95e60d88264ca346871341c8131c2f24facc5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-commitlint-config-angular-eris-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe9bd68dc8e90aac7ab0a970cb02985f0e50034642a9759c08c76a9d6d325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-morgan-aether-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760c98b04e7959bfeddbd8736fd9449113cf66e31d4730bb3f8b6dba48e44c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-markdown-loopback-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60756963268718f1cbe662239160df39fab09cb6b8c7ce2669016770b7b08ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-config-fork-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893df40a746a89d4d64ef239e7ba6265dd6d0d5a966591c11ffbd8f4c401280e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...