MAL-2025-159453 Malicious code in manadsi-sfdada-mabadvta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc405b9b05fd885664639aa91653d2609f170a49f3c35895d421ffbfcd1b940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167617 Malicious code in teagood-nalikoli60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d835a2439e8e760ed809bb5f85253c6f651edee67aee376bf50677e9edabe6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150483 Malicious code in @miptaa02/afyab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8dc1d2f3a3e634577b9a63819efcd96b60f5f05898aa906141dcb557ae6a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163089 Malicious code in nokire-namiresan37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b781c8aba928b3f1fafef55a68b651b3bb7dbdd3614a69380455c39a5fb90b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169181 Malicious code in trevora-cir127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1651d023a4ca595b5e1e89f828fcd6645ad568ccc2416a94cf61b5ba9c84326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-xerxes-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802d7a7f0ae8fc2df51dbbcc7b9cdc31fbeb2dd2584a21fc7a4905eec8e8f72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142681 Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144593 Malicious code in lynx-install-nightmare-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a2c2a613c90ca0489c2936c1fe6fb8e684de8d92be0fbe95bf566e4f08e45e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146543 Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147129 Malicious code in registry-gacrux-heka-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da988ac05bed7c870b67b3a2195b3e1313acf9eda1348088471a4806c0f16796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146082 Malicious code in perseus-enceladus-quantum-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4345762cf9572c4ca534d0cb8b85a40e1ec55b8a4adf7873feaa18f6e575f5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146327 Malicious code in polaris-cache-geckodriver-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tiwul29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cbfc51ce5eded70bdf564e056701ffddc24358123f0a2814fddc1d42e57b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ketan12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d6655e5fc06de1f8fbc9131dba08622458fc0a029c45c01d488662c910b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-dodol9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3018aa6266854301c5c66b076e26a535f7c21e1dd078d31b15c290148710137c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...