MAL-2025-167785 Malicious code in teagood-sukuna31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 492fbea391652ea5b05d1f0c8f9873e7dada33967a5662823db6aee8ef377003 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155785 Malicious code in huda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e8a7f27752f87bce9a22fd1fd954b75e034c966ae8a9c2ccd48f100012f17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162569 Malicious code in nokire-genji77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c729b390c16223433cf10a00b5d4f6c91b85071517234643cfdd53c673f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169889 Malicious code in uinsu-losiat-duku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd5824d5701118ac1c9ce573ec84e2e072a145ceee07248576311cc0ede9b4bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152580 Malicious code in alvito-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea06126d1e9a3c24371b3ff4354bf63d72eb1cdf9dd8241b1cf55327b6a5be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170496 Malicious code in verify-tayic-alusaklibamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcd568452aeeafd4603735d34e382b3a0321a114877eacf24e45f8e3ead01a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163578 Malicious code in nokire-zabuza84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbad44029cca6a9ed4406226815309fd492ed3db6674ba5365b948e2e49120c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150185 Malicious code in @mipta1/raedcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99579628eca13962b8cb5e85cb727f0eda3bd5904020ecb0f3e6459116623013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166762 Malicious code in teaadgggs-musngi-mifugsysts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edff72febf388f8bd780ae990e387666d3b0c1b51828590cd267d0bb27ad438a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169583 Malicious code in uarfug-mitu-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e111c5421e27746bdd13f0904c696f9b124bc673b23a13276808648428eb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148950 Malicious code in unchanged_planarian_sapphire-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72787ae4f6cb01641bebcf839c196d1d45de33aaff00cba1b43de43efe1469f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-yonder-module-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a88d8d6c9de0dc9811395ffc27c01a2b4ffde660a8f412ebbeaa8db6930e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-winston-bulma-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-antares-halley-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38aa934e84ed908ddc435863535aa884c4b9c09bf009834d8032caa86810ad36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-superagent-antares-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2031cddbc5978edd7175e265db1b17377473bce5d6cf2b5e972cf82573504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7abf768c17dcc0e5b07309564f07f447feb5c1795b58c7d519912d70485516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...