MAL-2025-159865 Malicious code in mansila-toafgviala-madasalakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c355ce59762cafd0a7871dd8f3549b11b9c8e1e6e77ea9989ae95dfe57d3dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156813 Malicious code in iqbal-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298da9a07bbf54a4390146d4392f797fb08672bfae44a2c94d222b6bc78154f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150031 Malicious code in @mipta1/ghds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f0f85f74c1de5fa742996172e323def05f150e61dfd243a97190c7e5830576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167222 Malicious code in teagood-nakama56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89093b338330b810d43702eee758b39fc2239170f60fbf3eef4b52f3cc685365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159170 Malicious code in makain-aniga-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d25db15cc746c9d4c3d0411f4adaad2e3ffef275a70885304e13f9d2b5346c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162832 Malicious code in nokire-lokcek74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4888d525f356aa03f7f82a8954591e2f60f057b76258222d046b128554a750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169732 Malicious code in uinsnu-lotaihzmi-kulnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f97c00f0230559234346d54199d04baca0758dd51b34aa7a009ad126497a0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163702 Malicious code in nudela-aaf-gaafodfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea4e851182c1a5d4ef91582c5d89fe34cf3a09471e9ab10c7940ee651d1f6b4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160072 Malicious code in manurung-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec7cfb25fcd174234b5f4031cf4035b52c17a05ab30b55a4680d460d09fcad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150594 Malicious code in @miptaa02/etdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac711deb1e77f1f916ff0043ea52801e519d0d2f7ec8fdd1b2e38ddf5088bcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163727 Malicious code in nudela-afgsihaf-gafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72190ce5bf897515662dd99ddd3ec2b46216eef012f4b775cfd5658d099d629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163281 Malicious code in nokire-nanali29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc4ea09961521b5f03ecbbd201d2cc1234742c85adaf0c4409a6b3f50155a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160189 Malicious code in masioaluan-ofa-batoia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c853f6678d96699ec63543304b2e36dfffd54ecf7db3f9e5be655af1f63c4831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157285 Malicious code in kamasada-ntai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a0b2bb0e30687a7dc48d7a0e32115d846a38402a912d63e2543393c2910076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-iota-sagitta-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b591b6fecf503c9168c2bfa57bb3c5d06274f8c76955b313a261d043f484f65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-carpo-npm-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96538ed22e9fff64506efe3185499e55d1ce7e490f55e0a7da4becfb0b9d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-readable-dactyl-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3fe8fba115d5787ca57c1183f16a661fb0dd62f372ba2f47737309bd8cd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-avior-enceladus-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce1c47ba5445dda49daeca42e550f04bec27ff0a7d15fef9aba199e2ed0641f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-spectron-webdriver-mdx-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b8d470d321ab03a10ab9f4052b8c7b555af0f0125d6f018b30dd015827bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...