MAL-2025-152130 Malicious code in akabi-aliga-aihaamava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552df4886b0af413d8dc813f95893a5f59adcd844d3bf7d4f920c629f8248dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150875 Malicious code in @miptaa02/nyas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005a5c5e95c96953d484a8edad65a64a02aca94c163b5a57821e473a7876d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170292 Malicious code in verify-ain-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bb33500e1600b3075c038b69635dea5a5a8565949346527ff1c934aaef8dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163620 Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158769 Malicious code in lookingan-namala56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebf0778ebc2ed539701d66f1e09c50d382562c3dc46906bd02596c052b3fb7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151249 Malicious code in abiba-alvbai-ayuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 767eba9800c52b04789900e08e4bf52c39ea4187e7936415b8b8016764316712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156366 Malicious code in inagi-vumayfe-nabfufasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c16c5f1ce7507eb5a34dcba6b616c47f77002d01fca9a52001b1d7dfedb150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154228 Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158311 Malicious code in lookingan-konami5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f8a04be2893878a57534cc8f9fda250afb1907d99959388a5551efd4d5c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165436 Malicious code in sabua-muyag-dafaifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b3a2f52813e5a25dad73881d89368f7e5de7460f6bd4c9f9eedd81234d8d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163325 Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164854 Malicious code in rinto-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f7151367175542b92308bf6122f7353e7d5b732c86a13231397832220c11ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156547 Malicious code in intan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5c1fdca1f69275882838fabd2dc40544840b1d52ed394042ecddc6537db707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150485 Malicious code in @miptaa02/aghgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71811fff52c56a4cdbb527691784069bf48fc2b368fe2a58c533268f86d85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159280 Malicious code in man-nonatai-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bee43f52eaa9bd9d46ac2cd1449fd903d1117e9b91f3f0dac203ea1cf2de163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-html-webpack-plugin-galaxy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b512e14d7ba52bb6f4062cd1eba6f1ea5d219bbff74f130db596d0b21f62e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-dotenv-safe-andromeda-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30882c5333071e479bc604754a3f9a75c212b00c96cc28b0fce68ccf9133706d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...