MAL-2025-154717 Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d213c7e123524e5920b2377b0425c71246ae1bae72fb628013e1dccb978ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-asaka10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc19ba894863af2daa2b8637a85629073ed4f7e45bcb6e5e0ffc382b2657af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c232c57d3ff201e6322bdb19b7a562a9ae31578d0db7152727e1c552f6fe411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164895 Malicious code in rita-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0509daf36783b4947b97c54dca5e8c957776371502e21b8b3c866f8f2bf41f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161311 Malicious code in nabuf-ogaf-doio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cad04688f1d81d2bad42f96bb62f02f11193af568e288619275488d0a4743f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162676 Malicious code in nokire-kilua82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da2a5cebd2fff1717dc94c92eff375efa5a8cc5f15f5ed926e480076339313a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/tqd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc02cee55f7997e2e271fa79db929ca97fba3c98e38852f2ad6567583f49d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163370 Malicious code in nokire-rara79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333107a92b4c51814f6c087f93b2c05a332cde2f49e6b18e3b97d2ef71663023 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161164 Malicious code in mutrasd-nutyui-mutrio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4452b7a681014bd0617eac3dc9ffb5b5e46242654d8fdb94b058da4cd80e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157153 Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154437 Malicious code in diago-klp-kalouba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dff4e3266ca588c45c067ac7cefa0a0811a049c728e9388beb162efe728ac0e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161098 Malicious code in mutaus-mansis-nutayiropa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dab0b53e76e32ea676daa7c7df4e95f185a6eafd7c5a1fd169117a15c2eccd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152151 Malicious code in akabia-aliguafi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b089a2a32017d484d4355e9fc4b527a8020f1f4fdbc4fb4ecba138c61851f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150907 Malicious code in @miptaa02/reaalsazy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb52cbcd9bae282da7fb365a8c5cd91c2e803394b4f5d069072ee90a39e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-lint-global-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b343b3c7c23c80fbb1559d9e971d309967cfca013ab9173753f6cbf65fe92735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147763 Malicious code in sedna-despina-pyxis-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d399d73429d9ba27cac764fcba3869ce6e10718127ced0ff53bb89d9614c692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-canopus-mutation-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5664bfa8cb0f8ea74e02667e677c54ce8adf8252363128555627600e9c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145398 Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...