MAL-2025-154343 Malicious code in diago-kalop-kalosoha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697f63d42883b8117e83d4b79215fd2b197df0098178c216b9bdad280415e5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160974 Malicious code in muny-nutsdr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317859b496a3f5e06081d2bd444c6e85ad95dda35493c7533201d68b2bf8b210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166490 Malicious code in sunderlan-uyud-vamukualaiabaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8d2416695c637ae567e5963f1d2063a0d6c9c1b57148274f1b3bf4e78f1741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163271 Malicious code in nokire-nanali2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28adb2045ab3c09e58ed598d5958b27086144b09604caef6b65db307b5e3c7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150765 Malicious code in @miptaa02/isweg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421f17b409fc696b709126be5d2597252e8df08d2a68aa22e2fcd84f940b5801 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156035 Malicious code in icha-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f42a8d648de7cad4bb212de5885b06877eef270b486da30a65f7ff1b41a5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164395 Malicious code in polymedarn-munitsat-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322e217c86307338f5b9e3a47d4f7c0ed4b8f0c756c58595c7ee1ef8a2891414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157152 Malicious code in jurss-dsaxdga-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73b0ca88f6704ca89d34d4305a3b4e73a3f467e9fe46f126fa714f04e322902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162142 Malicious code in nokire-abimanyu3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf9d78239ee6365870fc66a21b1b5303de46ecbc3ed7570d5a1a519187c620e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-algol-ganymede-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c303cf7884f70151ed9e6b5bf9c2c7e507450c13a216a7ce95ae230cb4f238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-barnard-bunyan-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f27119a3e95fe00266bbfda55d5c45c50fc7ef145b70d15e67d742e46f33fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-spinner-async-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a7ffb45dc2db3ff1f356c7e393e67f1de1d339af5165815c7bc65a9702f209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ff2d997a3921a2cfcfc49b398c173f42620dd3ec2c30e47b5b83e91b550b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-sagitta-delphinus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d591d1973e0d501c44c5aed9f6e6e63246cb03c6205caaad5d1213a3263e4f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-dione-graphql-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6fa48966204e7e4ec2f499960681d755ac463ce41b39eb2a6f9dc1921223fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-gridsome-odin-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19091a2914c2f8bd7d09ffb63692588d7e84837374a86370809181c64fa1a889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...