MAL-2025-151749 Malicious code in aciyua-idust-dajaguagaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb19979cee769fe9939c1e43067227289a89f1b0948ee2e82109dbe984d90fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170410 Malicious code in verify-ayicaku-amuinadabuhua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bf25217a27e086478eef6dc3712a40aac2da8df2a2121d3555c5428ac80ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153674 Malicious code in billa-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b438dff97b1b91b56a4cbf23275a91c04109dd130807ba03afa1a62611512d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151393 Malicious code in abina-amugmi-amtanamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5fa3bf0c8f4f5550764d4a4fc97c6096025dd8bac523b1aaf5754eab141fe15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156767 Malicious code in iomodra-foa-jalifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266fb2b0bee828adf61ff10dd6cc9b76054621d5c1ce25d4bd6139009a3b1ae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165556 Malicious code in sabuvaua-nalui-lunbisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487f826df0c57c77e75e19cb49cad1b189a2611ce8916f578e8bb40e32064ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153374 Malicious code in avminh-afais-fodamfafaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464aff8a9c24162de38a1dc2e7f3df31beb0deff455c32b2fa317f360d841536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161500 Malicious code in nabuf-otin-agog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8120ce85ccd608e368c6aa899b02537e14a0a5fcbb4e60613c4402a76fb80262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157845 Malicious code in kuinsu-uyilu-vikun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b4fff5f5b1ea91e5c4f0920a7a1fced90409c069ce46b9a8cd831a3c0c5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157563 Malicious code in kentung-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7879f247630cd4bc0549103b346a90471004b8cf82335629f6e9bfe6f5cf4b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151335 Malicious code in abina-ami-agu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b789843fa04669d3a48c9df2a099faa3afcd64f9780f081ad078cf24080e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161144 Malicious code in mutdaufs-nabutafidayfa-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebeabcc835df6eb5acbd5964190d58d5db53a2c81fd745063f7eac442ae0b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-subscription-heka-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3980fdce10741215a5b28c7a31b64d573e8ba28e502d529a090a5b21044aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c0b08346bf9c56d0ce926bc8bcbe0c8fba7e8a52964cc09a4318f02e8cf27c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-socketio-cli-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e03e5aff6dd409bd6e5222f02d13b64c289e2d46e8a2c667863efbc4f671d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-enceladus-antd-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e01f38b5433274e1e38e596e7713f44b9e706f3748c7005fb964c931d3bc238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-scripts-flare-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89eaec14f2f27132288be226ebb081c4188c0c06b56eb85760ea8dc44db967b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142527 Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-readable-callisto-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eddfb3159d163d87730d4aac6ea741f38f591cecc27a0197f72edc1a0747bba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...