MAL-2025-167247 Malicious code in teagood-nakama79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3504f84c0fff24378400e9bfc82428ff2be586b47f58e15aa2a3778ea19cbf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162368 Malicious code in nokire-arhani54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93e9bd3afaa11e2400060e2b393868d51a21659232c3b711a921641defca802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159372 Malicious code in manadsi-safda-munarda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc0a15570428addab87adeb909344dc1e1f0eac84829a79292c6806075911ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167714 Malicious code in teagood-namakai58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0339519aa6618d8b72e06dd874d46a3cd9fdcbf66662f16e792f01be036f126c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163663 Malicious code in nudalea-fofiari-agomoido (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd5da5926e074ef3f802db1bd21f6f1827399b17edf52a7aba338699aa2adbdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157677 Malicious code in kuinsnu-lki-kadgdumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf671fe8e65ccabdc0ad6a8ef24e9733dd97a8b46768bca0cdb9525b3d8de3df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155318 Malicious code in gifa-otau-uasuagffdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335086b4158849f8b2c3bb983978362c3e70fd6838d094b4c6c90548f1fda471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162455 Malicious code in nokire-arjuna42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed50e270245a30e7808e9dd8a095d7466cf4b5264bad6687c2eb81e0b96cddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155462 Malicious code in guras-ters-bruneid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606c8c56a19afe6de11995d8b948337d043893846fe455486fd4ba256c2483eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-ophiuchus-eslint-config-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70067f59028c148db888ac9fc27d2a76217a56f8ecedee3af5f4f81c07c29e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-atlas-jest-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5f147fde98a922274e900cd54befd2b404f5b5c90d849347db757a294df9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-electron-taurus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-kinetic-spectron-webdriver-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316ff0c6870cb7e06f0176f2e7de20fd675e906d81911ec6c1e19199f55025ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-astro-corvus-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58e3d277cff82825e0b421686cf2246c1d36a3d87e8248f7367a29975591f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-xanadu-equinox-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff14de308c8079777a0324927098d34e99dc81e491c65b38f040b28688b3d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...