MAL-2025-156498 Malicious code in infi-gafobai-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1253ba3abd75e28bd2ab8f9df0cb1a59c1139100d3f37e5214b8d3e2993359d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164640 Malicious code in ramadan-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f363e2fa79f954f3816d4400a8b11d594fd0f9ffe7436351760760e7304c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153008 Malicious code in aviah-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6c15d22cbef7c0bea26c1e6569bdfeed4a66c0f3f6ea5e9347fb4eb384265d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151092 Malicious code in abang-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe66f6478944060b518e5c56baeffdf60d2c6d0723653767807744dd5410527f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158826 Malicious code in lookingan-namalaka17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06d762795b586263f5ba74b5c572577ff66bff6795eddc280e6ff3458b8dda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155866 Malicious code in ibanuni-ota-ufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457aaf558bcfbc095704889febcc07fa1047db928f39da89b17f3d17b1b06bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150709 Malicious code in @miptaa02/gzfue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a1f43a6f2a982ff1fd95a9c61fb097697665e099f31650e8e844d4c2cf67890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160346 Malicious code in messi-tuas-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7ed72febd937bbb2fbf312107fef0ebea8dd2b4ac725692ca01d1b81f59e356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170419 Malicious code in verify-ayisali-gfanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5285a05c3993338b3dbd5be1d5b3583b1fa37d36cbd0d3727dab677673ab5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159011 Malicious code in mahnud-fuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2aff0e1d95981998af3e3d973c7519ceac7266aec1aee05542da8eedeaa4b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152418 Malicious code in alvino-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13d55c4c8740d37d2a3e6a453631beab1dfc603e345f64de5e6784a0530c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160050 Malicious code in manurung-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315bb9bcf58df303f82e12639bcde84be9816b8c471f49df5501bbcf0ef81c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150826 Malicious code in @miptaa02/miasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 045904585d2da9c118a652a5b3eaaff12232d5485036441291887f7886a6a48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159392 Malicious code in manadsi-safifda-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecd46e29dbc1be5b3895d179877966ee8d3743597464d42858be3d56698b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-jovian-axios-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-envconfig-equinox-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d82cf644f75bfb47cbabc64615e3caa508d9bc4d7f83845a2ff472647ab4fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-levels-izar-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84eff04b5c572409de5edfc7288ab325e0b895580f68d2370bebc0b185e7edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147533 Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...