MAL-2025-153892 Malicious code in bitha-90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713543a59bf8f4047b3f8cbe9d0ae560ddcf82bb40c4b125d082ee34acb0c01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165019 Malicious code in rival-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3ba532825208c7ef0f1e23f3326372bb95316b01280582182a1d6a383a223b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150485 Malicious code in @miptaa02/aghgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71811fff52c56a4cdbb527691784069bf48fc2b368fe2a58c533268f86d85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151945 Malicious code in aibopna-mobile-arifaui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3d94c2d8acda63743beaba1f6a0b441fb146f663a9659d1e5f285866590bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156366 Malicious code in inagi-vumayfe-nabfufasia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c16c5f1ce7507eb5a34dcba6b616c47f77002d01fca9a52001b1d7dfedb150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168191 Malicious code in tealove-coki34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa9d039df00a6d57387709dfcdcd3aafae20a77066b280b69962cb2bcd4def5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152758 Malicious code in arif-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155f7729515dd3fa05741c59fd37b75b19ffc6f93f1ebc41073f0c38530e21e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153315 Malicious code in avminh-afagias-ifafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752b47eca894e556a1df2273371e37749fad055d0c532be5f34935c39c86fec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165436 Malicious code in sabua-muyag-dafaifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b3a2f52813e5a25dad73881d89368f7e5de7460f6bd4c9f9eedd81234d8d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164854 Malicious code in rinto-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f7151367175542b92308bf6122f7353e7d5b732c86a13231397832220c11ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156585 Malicious code in intan-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b5a333b728d4905db0fd8585e4ffd7e5c776150f33ca8a629557c46aed78d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150059 Malicious code in @mipta1/inila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bcf9708dcaab2020576b4667be0fb0a2c45d13fce12ac513a87f5a8cfd665a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153440 Malicious code in avminh-afogffi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a5ff89755ce4c28f79db5fc6196aca8a3d1b0c27dc8e66097cbae819606d60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155605 Malicious code in hafiz-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c4f7f89517f8a744bbb82594d554d248e9580227f49b2fa02003e73766ac3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154228 Malicious code in dajouka-treua-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969e5bd440734c14899b862bee49d851fac31af4074570cbd5740ab5e2004689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158311 Malicious code in lookingan-konami5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29f8a04be2893878a57534cc8f9fda250afb1907d99959388a5551efd4d5c2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-html-webpack-plugin-galaxy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b512e14d7ba52bb6f4062cd1eba6f1ea5d219bbff74f130db596d0b21f62e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143974 Malicious code in json-gatsby-eslint-plugin-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71b7d24cfccff24043a5bf318d127b3dba80547a3c1e34d19ee6f55251614c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147338 Malicious code in rest-altair-csrf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...