MAL-2025-166349 Malicious code in sunden-dilak-nulikanuin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b46601cb35f96b6bdcfcc8b5804a4c21ce066e997841f1962935c4513ff231f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151245 Malicious code in abiba-alvabai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb7c2f20cc429b1e5c9f7bb6145bd4a933ffdbf5a921ec22774c4af941026c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f854c7d05615d123a8ad888bf144c3dda21fc839177497ba96904da781ab4ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7e0b1aa788464bd5a9bc55a0b06155270ca6b26c6d20e4b6c2a41c607faf3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150883 Malicious code in @miptaa02/olaaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49f8a463f8eca05bf116efb6376cc710471d8a0fd2f1ace4dfe5ba0a3300f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157880 Malicious code in kupai-lukta-igau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ebeb9d97ae07923b3ba0b8fedc6ed2ae065a10bf7960917a804870d849ff276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152063 Malicious code in aji-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-bunyan-bunyan-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f10fba060e2756632195d0417b584f2e2c8a31996212806af09d16a4a929bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149371 Malicious code in webdriverio-impulse-chakra-ui-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 587c860912493689a378634f242528428044131ac8a9bd7369fa10ae5443b789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148071 Malicious code in solis-bunyan-cordelia-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae0a3d4efd27bcb2d5567ef1a68ba332b10681346baf1df2f229957cc2d85f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148665 Malicious code in thuban-run-script-phoebe-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23563332488068001aab68f970057a006395d7bfff942c519c15225d01e2cb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149102 Malicious code in venus-aldebaran-postcss-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef214a4133030f8fa65da187e1e76bafcd0e723c5e4aa8b2eb3bf3d7588f2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-grus-cross-env-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0088893a97fa72af405080a5377eec93ec689ed41ab62249ed9e0bd9265bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147480 Malicious code in rocket-server-repository-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9a2f1cc9e19f3853a00c6425d9caededd5e2036c1d89d881d3241dd19d9160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145594 Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved-amethyst-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc184b63fe725240edae92c06b75e82b34d273e905edcb0272e0eb47c7ebd110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133589 Malicious code in frantic_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2464de5a7b5856997dd12a16bc701d6136380d998cdfbe5598c947df0bc731e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132958 Malicious code in easy_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f1b6719c29d0455faccc88a7b9ee97d3377522f4abe670f98f3b7129ce3fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137468 Malicious code in udin-donat40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea7756e7dfa8ed991187502bf3b3c87144d59946f2a9fb3501039a850253ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...