MAL-2025-166855 Malicious code in teagood-cuekin86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6731e5e1f0e5824660d25c03986de9d4069d41442d4f3ad37c98682600509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169045 Malicious code in tehah-nuty-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c52bae30aac38d6c372bae645b44b6aaa0d1d12443b1519e9ca66da1ec37ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160663 Malicious code in modirai-igno-jaimmagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff65c290f7d554060d6b7d0f251b38aa25ba6c88248da67527e44712f15e30b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166689 Malicious code in tadashi-ytu-bsusty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 162b8d97bc6bb05ad508ba6b6c3b04c30f726ca80ba11a12ea5e8d96aa307af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150417 Malicious code in @mipta19/rykdie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce783c17d272e0f3d578e49323b11f679f5ed48c164281c68b1beff96b481e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167976 Malicious code in teagood-yakuza2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bedbe5f2f77b65c783e587b1c731a934b81731933e33a0f8a915adea432d4e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165221 Malicious code in ronaldowati-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f308267d51488d13b5f3e7f382feb43b233c899104ec4353d9b5116f1657532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168032 Malicious code in teagood-yakuza71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bb97b5f0e3c4d722d5b0418b070b72fb62915d76abd0576f26cef8014226f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152737 Malicious code in arif-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af35163fc0f1c6c0a36018602abf9885416dccc04d5837187a9b2f8ce11889a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150043 Malicious code in @mipta1/hdftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e6cf8e94375788219711b3acdde8aa859053a4ff314a36a17cc776ae9d4f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-backend-dotenv-safe-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781f6d6927036e8ba7935aa91fcf468079fe5edef66c51944922fd9b13d986e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-yildun-html-webpack-plugin-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f516760bc57a8ec8d22c128a4277234f4b318ecd20f0497088a49ac229b1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-update-nestjs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 706afd176ee6df8e6faa2ae433810bc6eea5e2fa845c2dcc19eb0868e4602449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-levels-event-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42148929b6b5fee816c0a3fe4dd4a05f367419a359e414340c8254a533528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-pino-supervisor-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469ab036f2df2169a72083315b0c33c7cf86cf51ed9219beffc4d2b3e4a8dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-nodejs-spinner-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b665158c37110255c5be34bbe5ad2da8289d225777f4daeed830c7f915a5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-phoenix-hyperion-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952476952f00c78ac38eacfdc6ad9794c14e54caac5c4693071065f2db63bc34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...