MAL-2025-162363 Malicious code in nokire-arhani5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7966a9fa44453c615e2b4a36215616040258ccb80a01717beb3df89bf6bf5717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154305 Malicious code in dia-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0a96f016357b1e560c4cfb0b9b324793556c1d1e4bc1e308d7c5c0208de129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162735 Malicious code in nokire-kore5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 980d097d536431da9568be74511025efeef2844267cb58d68ba09928ffe06836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150118 Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154282 Malicious code in demdadf-sadudar-muaifop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde0a47d29e552d21a930a952dd54e12c05f9b8cbc37494530eafb183d74328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159261 Malicious code in makani-aiavamoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38771a0abb45c53478fdb403c0cd9d16ab63310066e512b1155a54a5226f331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149431 Malicious code in western-amaranth-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256fcefd037c6bcf57310c55d4eee222cb6a258399e8dfed1ee8e4c5ba6a1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148346 Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147934 Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-perseus-jasmine-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 805f356bb4d61795fc241c8c90b7069725fc6c8e2bbba73af382ed4cc9fb3072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-galaxy-titan-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41f87fbda362c14ed0d2ce294e7042bd6d3b72ad11ffe6d1fc90a4c990cf9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remark-meteor-slides-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db4f750a0eb590c31e0a9400a047a1df8bbb6e37335e96c282103d3ef23085f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-callback-pegasus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38149d9fe8687c7e2c46ea0ee733ed9a8894eb2c8cff4bdec6a64bd7493c91bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-antares-iota-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219c5e9edff5316f15f5da2c1888bfce3d91c319d26599561b00638d6cacc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...