MAL-2025-165580 Malicious code in saku-ai-ups012uszzgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79186aa65a8793620992b9d71a49ea987553eb8a50e349179748343f218d83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162213 Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154135 Malicious code in cio-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758d017ade4a1c9ff5b93b423371f788b0a793ae5acd34d5bf9418fb024ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbecf560074c5d52e809fd273273bfa13b7fb60b5156e276e1742326822fda20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156210 Malicious code in ilang-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f8a5978a7ee55d9091e1b917bc0d76e71f055a618312a1555e3b0efb00c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151918 Malicious code in aibona-moile-aromagia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f3b0f96547412fe10b8bc92e7c2f7b26c9c4f8e3491b6e6196ec36ce736785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156026 Malicious code in icha-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d198d3a5fa0788f5b750cdbe388561d65db81d5c229de90da102bb9dd03f615f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151916 Malicious code in aibona-moile-arom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd474deb61f50984268eea090d5ce8da4764043549e9ebd1f5a91db5e2d992ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167756 Malicious code in teagood-namakai96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a1508320493850e0cc6ff4d8082be9ad024a51f33a4cb065806de85a4c855b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159443 Malicious code in manadsi-sfda-mraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b2ff62570e14c541b4a5cde27e333651f1f5fe2b90361d47ea96be4f287a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164852 Malicious code in rinto-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d44176f71ca265eae3baf77f2296cca6c154fd1523275412fc561847855d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169175 Malicious code in trevora-cir121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87105545433adb02dcd0eaf3757ed7c4c20b1daf60ee22cc803808a3aeb3f9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-unuk-weywot-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462eea52ecf8421c53bb7dc5ea4eb44ec9e279532735153b7c54f5e3e44e0bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-process-eleventy-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa0a62a0964cc170bacdb14d0ca2933b6ded18f5398907f0ca41ecd9326ca44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df9ea4b32d4c9b2d2ce285363f2b37f3939d71151d71bbfea24e5c4bfac821b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-atlas-dynamo-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-duplex-shelljs-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b69b037c38c91ef9567baf3c3f0f8beadf38d2134de526c52e6e8c6ffd77ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-vulcan-gatsby-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ec49c3b67516e3f61e09361c25148275d3b217f976b8a70042ad1a71ac14b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...