MAL-2025-165372 Malicious code in sabua-muhuffyu-tadamafdai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083bf56e7f44b52cb10080bba6d2033ebc88091ac95967a7b1ed66fa9457680b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151247 Malicious code in abiba-alvbai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cfe027f205b758d3dc91356e78cf915de68135452f8b1b4cb4bc5aa43af21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157908 Malicious code in kupai-ukuta-jokaiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b0e913081917ab246faf378378106899068b3f948d15f36869f65f21ca4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167579 Malicious code in teagood-nalikoli26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bf5cd6c1865073d828a89ff45c10d8adc0689fbf62000c3cf8bb684f68643fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166665 Malicious code in tadasdhi-ert-sert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af08e49cbbd9fea076ec3fa7f534b0348428957f2decfabf15f75c3e756fd7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161679 Malicious code in nabuf-otomabin-nuyai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f55e3fe1bb50650a6cc18680a961612ed85e6c85e439a58dc3e284889aa2849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169843 Malicious code in uinsu-list-patulimabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08dfcc70e613098fd062b79261dcf51b6a743fb3bbf45221bbd9a96ea43d079f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155247 Malicious code in fitrok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 950ef80b3f56a7a8d7db82dc5261d4a1dff42dbc7e624e213b547728190ca1cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154045 Malicious code in cinta-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bc3a5bbf2ab20782d8cbf8abc2d5a26a58452ca4e9ecba530fdec2314c9f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157398 Malicious code in kapa-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1ed4dae1b7bbda8d8965b2a223d88d2edfa7d0c13ec68e829ce26e47a7e512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158924 Malicious code in ma-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4659ce9379f7c7fc415db03c8a877ecdd5b89f4dfdc289b87367bfc6c78cb1b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165244 Malicious code in ruji-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfba4b832bf953d69a29b837763b5cdca3497c4b4bdff641473e4d76d2795aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f9611682bc34cb71257391b5f249a4e48a1a84cc36893dceb88e5bdf22c29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...