MAL-2025-162498 Malicious code in nokire-genji12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7fa42cd8438e718dd20f739522fe74552ab36510a99268486db5395d4c5567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157733 Malicious code in kuinsu-lubki-nasununabaubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb5efd8eb8e5955fa0d589c9a43edb1321361be027c4ef921373c2ecb7a0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167019 Malicious code in teagood-lokina53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c86b6fa36844432201fba1efc79c4a21a706a3e52b509cc2b2e004b014714d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168239 Malicious code in tealove-dana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b880f64ac3a0fc6f52ad59e9535f724ce67c13d99f7b2ce83b6ea8c8e82dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156699 Malicious code in inufgi-gotumafa-anamfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c3585cb588cbd195253b23feff93e62c966b5f604cd6639494fe9102eac02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153165 Malicious code in avminah-fagmaas-adfimsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b03500685d2e34be58fa713d2051dc975d4fbf69bc624f0e77a29d628cc1666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168681 Malicious code in tealove-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7b77c8849e0b75133f36fe958fff2fb6e03d8673b086dc5e556c3a5e8a4f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168925 Malicious code in tehaah-codf-braew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d885eab27563eb02ba901ed41e76aa2ae24a4daebefa71588466b43ccfd6669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153109 Malicious code in avminah-fagias-fimokafiugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e62359525b92455dcf303cc6477e451d7efee8308b1926d9e9a39d68f97c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153025 Malicious code in aviah-afiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9011ec86967ec7365a38995cbcc18feed364f0cb7720ab937e3904bf84d1cac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167817 Malicious code in teagood-sukuna61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a60fd6b0ae5f41bae577398a1edf14ab0affaed14933f137f7c638b8681c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156871 Malicious code in iqbal-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72e75a00368b550eb642f3686b3c703233d50129eede989f542faee046ba984a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160976 Malicious code in munya-bopaha-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4034b7efe61de6e0fbbeec4ad2c7cbc82e4a73c0a861e6aa2cadfce1f2745290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158161 Malicious code in lina-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecafe47b5a373885b23cde10d517778a0de3f74ace5b8d76f919147d8ac3d522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157651 Malicious code in keyla-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb91277424e172994cb078c57c987ac7c83f373888c9e37bc116691fc2658cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-warp-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cbb3a25f9e7115cd8827ab56a1321c0f8f884a081a2f18d75c542301245404a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...