MAL-2025-163801 Malicious code in nudela-ofgaf-gafoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67bdccd09312b9737a957eb209b2424f851de1366ec6197b12dcc708a4d34132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150594 Malicious code in @miptaa02/etdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac711deb1e77f1f916ff0043ea52801e519d0d2f7ec8fdd1b2e38ddf5088bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151866 Malicious code in aiboa-molipie-arammia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad471f9a75e03aa38ddfd6829b6ad17770cbc23e08ac393d1f493c202df4432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153941 Malicious code in bufpani-mau-nmafafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df8acd7280a499bfdeaab658d456d94962bc84d5bbc35d0b78ba27fab1ba1a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156515 Malicious code in infi-gfobai-jilagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0be618c72597ab95fdbf061cbcf9f6452dbe8326de09323484ccc37759fc11b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159865 Malicious code in mansila-toafgviala-madasalakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c355ce59762cafd0a7871dd8f3549b11b9c8e1e6e77ea9989ae95dfe57d3dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164132 Malicious code in pilka-kalimas-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d75340e25d34c84dd32388aa4a772b761fba5f12da4033dfbe95d52809e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152018 Malicious code in air-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb8b149d005c44ba6b8e380a212562249d0004f02a0c5421bb8ec89a91ce739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162832 Malicious code in nokire-lokcek74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4888d525f356aa03f7f82a8954591e2f60f057b76258222d046b128554a750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160329 Malicious code in messi-jdgssa-sffs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f77095c3fb155839fe487c70397740c5832bf28952060bb0519504d8029164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152030 Malicious code in air-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20660bfec93f6feb9ad6776c90a96c633ccd92f01c669ccff03104fd29f388f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168956 Malicious code in tehah-kalia-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c876024643e02d77e02625c724daf5a1c8cbfdbe663307708f54e2ca72f6770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165548 Malicious code in sabuni-nibia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e4485aedc782d60d999e6b7806efa27017d0064b72bafa12b41d87a99f3433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149936 Malicious code in @mipta1/asaix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9e2e96dcba3be0618b9d5209c8c9bf8a9c251a4943422f799a63ec0da8a37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-xerxes-phoenix-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa53cdb21883c83010f5b066e9c80d22153325969ee802d62fc3eaa81e6b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-spectron-webdriver-dotenv-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d525170b55a178d5be03793420354ed5b67b0d55cb5e8b560bba82486569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe2af6812199247ede8e24f95898a6078f72f1f090e8bf50ecf30c6f91ca063d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-kaus-despina-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-janus-aether-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce5f408158a22ae9ab0a73f336c45a653252c9211ad2147a279babe6f3de397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...