MAL-2025-160092 Malicious code in manurung-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acb15e568008e1484114933854bfb0eb9c06752e5b0a6f2b284b836757419e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153921 Malicious code in bufani-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61937eb0da506a079f96a67156f7bc48b10a1dbd87a730dcecf8457ec4a0068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155117 Malicious code in fitra-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04890a831aba83e6d49d86abaaa8cb4a7f616fbae02c335a131094caa59eff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167624 Malicious code in teagood-nalikoli67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70476bad39c30b30a1af99747a6ee9046b3dbcb3ee187f576f029f22d2d7d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169804 Malicious code in uinsu-lis-dingk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c43947da27ae8bb3f6f76112031188c99cc2b3bf8664ac2d1d9b3073611cf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167609 Malicious code in teagood-nalikoli53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1374101a6af73d4c0e6e6c595f6f00e2927d8586e26595fc59ee9cf1541efd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152209 Malicious code in alfiansyah-pok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb976dd2eb0ac8a16f9653530c7fa6ced0cd8cd09c651e076a425e14a520345c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150214 Malicious code in @mipta1/sauesdpf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf3b598024b30eeaf8cadd303498f3cff6a35eac77395f7d7b568d5cebca3c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165893 Malicious code in shilang-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a995b9d67eb56d1eccbf54ee8a8cd7562a73d481f72fdde382fe4b0edec47cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169732 Malicious code in uinsnu-lotaihzmi-kulnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f97c00f0230559234346d54199d04baca0758dd51b34aa7a009ad126497a0a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160337 Malicious code in messi-sdubda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6877726d17ce7738d1fa5774b5e5455e9fdeb09c9843032ea682444ed726608c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161881 Malicious code in nasrul-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce7a81eff1f09cb018af6602b90ae97c1754b9746273f682985102575d51e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156476 Malicious code in inal-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae61109fc4b189d28357514efeb1fc8680acf39d3994bded32e92c96b4e8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161016 Malicious code in musasiak-naik-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423334f7d7936af13682ce66acf37767371e9d323e960deb595695c332299ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156977 Malicious code in jeep-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704caa34bcafd281bd5307c3fc705cf4e66590a44e21a3860a17d91098939e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-morgan-hugo-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff18a072eb34f9cbc9d7f1976d7bf811c57d791fdd1e5e63e36e842ed1b7936c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-pretty-procyon-redis-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6fdc4f0dec8028c29094b0260a239dad14986697d599671509e7985d30710e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-loader-phenomic-phoebe-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cd1ff25e1d1dab0ec49a40130c27cf086276094946c1578b49eb29788edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-aether-metalsmith-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb59dd9e7a3c9ce99968217dabaa8837c397eddb5066f0e0d7db5d2b38e1dfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-schema-lint-staged-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 182bdf0b05b5457d0c37e6f69facb9c7c2bc36545f9fd0d8100a99eadaf0c2d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...