MAL-2025-161329 Malicious code in nabuf-ogauof-doiofafsi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9295ee562b28e7a19e902a9d1d65c8fa090f9cf89e76ec4bf26b3043b0fdb241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159116 Malicious code in mahnud-unagau-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9be47067eeb544b014c93df2ae8d7882184a5ec46325e8a6a7b2d69a53b7d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163258 Malicious code in nokire-nana99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c0d80a5cd2c157d95824c1227c93f6aa152e50f0fc43e08636b4ac20ac4d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166572 Malicious code in syahlan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa430682414d195cb3285363f983e26db082e14cd8ac089423a1f76a98cd9533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158735 Malicious code in lookingan-namala25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1aa2fa0e764e7834808c0a0d7fc5cf6cc74e14149d67036b5a1e2155f276b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167601 Malicious code in teagood-nalikoli46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c26f6275ea585313aa1d85d34b1c60489c6eabc64bcdf49fbcb85e76eb84a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170301 Malicious code in verify-ain-sua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9050e5948f3aa7bfc74f04c05246f5bcff48b120192eb278d1f661ad12b800a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170107 Malicious code in upa-lubali-ilulu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f4f9e04c01f7aa6acdf50d9bd6ddd26ee259f180c1398046a6470f148816d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164279 Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-rimraf-eris-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf70ed59506b87bb301e207eb1834afa3b553ef1cdcd022c7e11d77fda8abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-jabbah-nodemon-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b2182e2ead59f86384be92273d8cfde1f64d3a26d5586e5239600a73b89eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-metalsmith-hermes-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd93e95ea1a4a643c5056c08bcede32284315366dcdf316f1b9da9df3b55c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-postgres-helios-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b00b3d16da39e85a367558e438d72233d4d67d4b9e9c2633f5b22123e510552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175791e0a2ba963a3bf01b4cedcf4e14f64712bb8230142a684a456e4a8b944d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...