MAL-2025-163226 Malicious code in nokire-nana7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586fc8517a02bae3b446bd656eb11cbb578ea5f98b72cd339f0e25affefe41aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150322 Malicious code in @mipta1/ytua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07768d3e780ee4d09afe2f917e486db4fb59f69748d949e65b7ecbc5b39a61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152692 Malicious code in angin-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d34ca7597334e4c20f58441a6414f98533f0ca4a6c8416766b826e2ab2710db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165818 Malicious code in shilang-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e4179949d0ee705f6c70264f44e538797bf44f4e6214f4711cb883ec2dc047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169079 Malicious code in tehnah-codfd-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4290e7100a231dc0ccb9b79f935abc04d6363cd2a8591b706ab703eb4e54a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153804 Malicious code in bitha-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8955a2da796cb63dbe1b02e9a28931cf1655fce1d3df9176e50563853c08e256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169563 Malicious code in uaragifa-maranfu-safar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928c767fb089b7752f392c35f9c0f7cbb7cfde5fec224acad074ed76390d2b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161854 Malicious code in namase-mewel-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3265ab7e74f3a8e50eb2c8e761ae120da08e278bc2b0704d0e3c92962056727c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155674 Malicious code in hariyono-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ddf399a833e69e2e7989bb118a25502ccc76263a966f9b874b7b55d3297729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-dotenv-parse-variables-foundation-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4e43887209590a044bb3f50e640e01143b01b3499e17e38f7fcfa18a28875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-cressida-cz-conventional-changelog-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7b15bd0ad820847c3f3b8a08feb88d892503107b46e53582ffe47cfb4513351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-rocket-delphinus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c1857507a730cc1bad9936eda3f03cdda32b8b2ecd1b8a2a1fb384113655dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-nova-sass-loader-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b57c9e983fd48309f566dee903920286b373bc535312593f2305034cd2ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-middleware-phoebe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3e51978571ca4dfff349d756ffbe01b1a5025c948ec27206dac4551be7b695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-yaml-build-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894adbcc9f4739bb639ca7e40464f004fc072698d0e1f78d208a3e9b8d3da697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...