MAL-2025-152594 Malicious code in anaisila-pafai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1c93da8022f137e6adda644ef42ea5efce07c3e0bf8fd95ef050196643091f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335eb7ee2b9fd3f2f89f6459edc2caf60f82d8491bfa95c23211d7d21329a2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1527c2d2a8f225cabc23d484cbc3c7848f6f272a1c14d8326c929e5f9521ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157016 Malicious code in jeep-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3279340592ef8c5bb707e387f801b53cfd16267fa43f57fe5a177deb49e6f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aeb4a0146e30e52f07c6f7627d30233b9789e955f74401e4009e1717fcb7731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37e2797f20831765f7802ef1ff9ae52570b476efafeac4cc55ebea8556d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158460 Malicious code in lookingan-nalako5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e38df0dd4a6d8b7ca743350dcd4259ed4729076364c0cc5a33f3e8f387815d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166975 Malicious code in teagood-lokina13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5828789d96ab517deccbc889646065c9c02e725130476e92741c8585df25f28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154913 Malicious code in fadila-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67aa7a275dec05a397abf1e6190186c43ca2fcfb7cefdd00872936a1bc4f2781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146500 Malicious code in prettier-polaris-avior-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3192b3b22373e63e2493a019959c33075e6492d8e743c885cf39b43bda1abca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149734 Malicious code in xml-relay-jupiter-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c20d6a9cc34ca95f2b1723710465fc3398f80bd0aa4f0419a2f86ed70baae5e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140827 Malicious code in cluster-gemini-jekyll-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5048745286b07cf1af85ce48d381d6c247e7e07dbcb4b62a9ef60a15e18de9f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-passport-hermes-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c627797fec31a2a6dae80006e9cf6132ff2289fa44c5aa6e583594c1c76ba70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-cygnus-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26599798d1f508b4a74bcc9c1d87ad759a3e61e6ede05b60fa179cf208d6651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-yakutsk-xenon-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed36fd92e0443fd9e17ba71160b7289dafc15159ca4cd894ae408cf92e488f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-csrf-cressida-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a03b5bb903e9590aaaa21b6b9e954bb7d9b7ff7cd16f69072646e6f56f766945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142349 Malicious code in exec-less-commitizen-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99abd01217e56aebbfb133b6b43794511bc65b3e048a0bb58821ba2d7898bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140150 Malicious code in buffer-achernar-winston-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a565a391c2111e7bfc57ebe2f777db3411010b05f0da531578022935b325ea29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136012 Malicious code in ogi-rojak34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b655193d7f860c2f48913703d85ab28f71718714f26bae25918dab805f30cfe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...