MAL-2025-164077 Malicious code in pil-aku-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3806095e217cde95ed4d5a9aa856af85f62bedda2d4730be67a942437a5e4fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154400 Malicious code in diago-kamuli-luaboquak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d223e9acd5ed0654eba846174ff0dc8a588078b64ba5bb2e8d8cc7bb9034424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163820 Malicious code in nudela-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640686d6057e0f7cd97450c8d3d6a9ac960594b7590364d399e3fa0929ac62c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152704 Malicious code in angin-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b8d1ebe5caf92d2d79750166bccc08738bdbf870df2b76d6468247c710273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162844 Malicious code in nokire-lokcek86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633bf81780020b2584c8024f72bce76623721bb86de351fbfd488685c35f4ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162063 Malicious code in nitaaus-nddyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca36917ee06b4ed2af3056650c537e673cee758ec8bf5d6cf18a1d5b8c3d734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161337 Malicious code in nabuf-ogof-dofsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e2ba2a1fd73194744a8396ed66afcb58a0bf9ad8ead3042b514518cad6ebde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158210 Malicious code in lintang-tea5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 630d7cc6fcebe969da08b38515edd80f389898368ae38da5950247ea9daf12b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb2a68425417ecf60f4c87b092ca60423ca8ddc7b76630003fdf3e10d51fd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-ursa-ganymede-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427212e66c2c920494458df1e674de9f5ab3f1041f068f2312a5a6c8e028e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-cordelia-quito-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f3e8c12a5e507af7ff89897aca212fa0d62f72bbefe7c7107241f0d4f3606f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-elektra-quantum-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00342994850ce03c837378e8eda96dd6f80397b14d78a04906aa43710f198b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...