MAL-2025-167375 Malicious code in teagood-nalikami103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b869d8b1c53c877627e82c8b061e746b3a11fef3f76d3a8feca4303d87330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5da9cffd8b2736f34e1eac31888665e94be76a350fb5292edca1d155d870904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-vinami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b853e455df91891e3abf026c6964a3cbe935adc7570f563e2dda77aeb635cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66063f16393741fe8de1d2f7eec0615bc73f0b67f1cdff8ebfb8337bb5d7f3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-ndfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70500f3cdc99dfe7ccad67b03b2f0b764e4fb49ab6f051441a3869a49b734581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153657 Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151815 Malicious code in aiboa-mioliupe-auma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d137c22936241ed4a69c0beec8c346131b8e2ee8d1978a1a8b07c3c40c76665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150873 Malicious code in @miptaa02/nyani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6902cde8f7be375abd955cf38c1f34a22b3ca1d9fa0b687401c4c22134c0593f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166225 Malicious code in suharta-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fda4cff50e423bd36577d4fc088984bbfb3b8c6e2d7d8a4a0261f041bc65160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158276 Malicious code in lookingan-konami18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8beb78b06447dddaca137206d96510f4541b66e5d995ad85cc60f108819b6402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155791 Malicious code in huda-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ff4fced99662c96d9fdb8889b0e9efe5a668de32bc4fd6fd22cbf6edcee0426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166203 Malicious code in suharta-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f659955f444df90be1d20bd91132379daddc1c59b1c9f97b5a6e6d1ec6973e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-library-metalsmith-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecec03d8c8bdb14d98763d0189b3a6b4d5c6faeadadd6bc349d8c5667fb9986c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a6f8049199b598ac6a94328e799d71ab971e6ac6641d4f180daf58200cba22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-protractor-nightmare-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b9e415757c6071f6593050f97c59f34e49f7c658690288d860be19b3ca16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141059 Malicious code in configstore-playwright-charon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d23e4681498a17b8540942a340a8b572177655a82088cfdb027d1b5ec94388d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149873 Malicious code in zenobia-sails-chariklo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd4814d994186a5660f22e03e2f758cbfca20ba3b3dd80dd97a01dac7ca3a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-morgan-aurora-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b05a0769bbe5cde0c09615f00b83963a0ee9337ff58ba3d9d9c8b81228f6c87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...