MAL-2025-156633 Malicious code in inufgi-gobali-januli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b610fb9270abfa33a6d006b8e937b501f6dcd06789da7f7b54c7d9b54d027bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170024 Malicious code in uinsu-loti-nalasalui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d0f9c05e4939e02af3128e3ad1c2c2c75b954622ae83fc37633fc07504184b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152121 Malicious code in aji-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9349d6da31611245f76eb8631f36274e5b29b64cace0fe3ecb9abb5e40c8d41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155686 Malicious code in hariyono-78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0883855135de0946ae3266199ecc511f26fc8ecb492554a6f70aae13d94c39d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167601 Malicious code in teagood-nalikoli46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c26f6275ea585313aa1d85d34b1c60489c6eabc64bcdf49fbcb85e76eb84a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154693 Malicious code in dioago-kamoi-alasisaoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5eb9f5555cb0b84808eab0a177c755c0ac6aad788249effc6a32a906e22f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153641 Malicious code in azhar-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e19e9ef3834858b66d6b3bd17ce8e06b52ab8dbe34975357b84ce427bac40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154752 Malicious code in dioaloago-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0296fa2392145fd28063ca0931c010380a4fdf608b6f93796db67f185d9e388b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164354 Malicious code in poli-akilu-alubnina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389bada6b296704343a1dabbe22fab3b9c33f0915e90d89b15f2c9f3adb37b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-antares-wasat-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17793dd4545a736114649086e593003aa80ac3a044ccfcefbf148d2d89f9a323 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-acamar-betelgeuse-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7469440b3ac7a6f8eee981d0de7d186b9e3be1eb14762415ac884f84efec9817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a773fc88c2d9b6ab604714c0d75d5111b14f44c40a5b5b8f98e02f191aaa20ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-phoenix-sagitta-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a022901a26ab940ab59770527d2157a740e1c08e7818d0ef15f845271f1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...