MAL-2025-161148 Malicious code in mutiafa-msiuyu-masdta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed48738d6ad3a387da53ea0eb6e51b594d59ee167fe3a4ea71ef2b8ae5eaf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150632 Malicious code in @miptaa02/fglkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d8ccb3e1fec89b8758eaf3afc66b7f6e62b8c7005806df6f970fb3615caeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151622 Malicious code in abuni-niia-luhubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6df9f5f9ccc1b47dbc595ddfb30b9f030e8908c5ccfb3dc7ed2306b8a334e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157223 Malicious code in jurss-zas-dss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdde568a2c1082292886d937d63150147189b272fc11204b7cbe45222182f9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170301 Malicious code in verify-ain-sua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9050e5948f3aa7bfc74f04c05246f5bcff48b120192eb278d1f661ad12b800a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158678 Malicious code in lookingan-namakita65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdb5111e65fa99d697feb6bc9ffb22b86126cffe7747f08dfd63b1f1b00d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151358 Malicious code in abina-amoavugoi-anunhi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402c6f652a57d55f04f2ceba119e4065cccdeefebad7164329842196d6edd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170107 Malicious code in upa-lubali-ilulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f4f9e04c01f7aa6acdf50d9bd6ddd26ee259f180c1398046a6470f148816d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166468 Malicious code in sunderlan-uylud-vamuiubaknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef4566ee93db2a10596ec5e6fd1c3c1b45269a30ce413399867813627b693a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175791e0a2ba963a3bf01b4cedcf4e14f64712bb8230142a684a456e4a8b944d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-despina-express-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7c54546c245026e1ddf3fc858471f2a6afa4c98b47cfbbeb35300357a35dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-postgres-helios-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b00b3d16da39e85a367558e438d72233d4d67d4b9e9c2633f5b22123e510552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-lyra-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f0653ba576b64db957b8616b378786fdbf0a14b176d898cbbe3bc05bb2e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-rimraf-eris-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf70ed59506b87bb301e207eb1834afa3b553ef1cdcd022c7e11d77fda8abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-jabbah-nodemon-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b2182e2ead59f86384be92273d8cfde1f64d3a26d5586e5239600a73b89eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...