MAL-2025-151245 Malicious code in abiba-alvabai-ayu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb7c2f20cc429b1e5c9f7bb6145bd4a933ffdbf5a921ec22774c4af941026c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153159 Malicious code in avminah-fagis-iganmfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85766897596b274a7057edc8e0dd67c82917bb9df518b79af91acd7d13ad586d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minda-buipenajaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b45da3088d21865ef96e35f87e6473d677d3dab980b07aa4d3d8b5d21d8525df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151227 Malicious code in abiba-aluabai-ayauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83d873403a85f615d75b47fd993b9449084665c24850da89e42065e5ab752a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6cd0db8876833d8b95e01322b8746302ce9a3e55dba7a4a69b7767307f07ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170155 Malicious code in upilka-luzmu-kijnuhgijani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e87b63b5ef8bbb0a20d06d69f51890de84ae9377a9da7329fc03bbffdb722972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164467 Malicious code in polymera-manuyat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bdcb879334279cf7517dd244b74508463400d38bd025dec277e55e4719f0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163225 Malicious code in nokire-nana69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4f30402549a10118ad32e7441901c16dfbb8975a98151670fb631e67062db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156877 Malicious code in iqbal-poke68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eec29e913e0997da0108786bc8b7bf156b69751260b40da9fbf2b6dee5e71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159655 Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155844 Malicious code in iba-otan-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead9f1319fd16c6c0b76d51a08ac52ea383a841f7237c6b513dbd6e0cd40fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160421 Malicious code in milaoa-dudio-nsastuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc521ce502d8cd92683d3124e27792831156421118f88df1279a4af6b186688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152947 Malicious code in astia-alabki-maloosskiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20efc0dd22fcfd265b924d65cb0021525a14b9ad3fd73d52e1c3c19e6859193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143072 Malicious code in grunt-public-yonder-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920769a89fcb827d5b2c803bc75e9e94bde3109b923acbc4292bccfb706cb4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-polaris-vuetify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a547d349d71e54630949a781fd9237275efb916048f36953d6392e2995c320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-virgo-eslint-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9404d1108d6ebae69e8398bde30e94e093d70c651f9acbb8f4610383a52ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-webdriver-mocha-ganymede-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9ebe0367f6386af7a0bc4b075a8402500ee6371eeb019f4f8307ab271e7fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-npm-postcss-loader-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66207fd0bac9416813a894faba768dc4da329f3282fe3826e0b88d6f0db7dc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-chromedriver-semantic-release-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590cfbbd2666570f8d9879763164c990cb4fd113b989d953b739241f50754b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...