MAL-2025-162710 Malicious code in nokire-kore23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb4b43eb8ebfc59e1cfc84507c0581c18224c9d91817b7f48cdc8843c49cadf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161743 Malicious code in namada-kasito-nagam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ce63bac94bc6aad0941324c04f9cfa216c3fd7bb61f58e43325c759e7c4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150540 Malicious code in @miptaa02/awfae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29110358774fd1ac00a88fb38cac96ea2d338811a2273c72b67890c934b2129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169949 Malicious code in uinsu-lost-diunsuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b2a4c4ee2be6bf2cc7668b28ab5f1147a618693b8ceff7685929c2b3fdf531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-idaduasdssuyffan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03a129f4c877fc42bd61bcaa6adb7a58eb730e97b75be86973d02fe9d70146b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanukakaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c16028a71587dd0bc32828d981fdf5bb23ba2975a55cfcdd37b76471e21967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160533 Malicious code in miracle-doki-unisakiaobaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc37aef52db683ab8e2504f1ae741bc7530180b87002bd5ec8d71fb96b81f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164560 Malicious code in puteri-mint-mutiara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482746b9914e3b864eeba0e66ddfd385d291e2616a0e86d14d4b59b5b4335fc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-cassini-apollo-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80554e528c2a2f596f1e60989a7b44f1288d8ee48a9cbc1fb9477c1c18324a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-procyon-neptune-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4619fd351f85f1a9556030bb0bf06dcf219938961232dcd3f091f3f5d47fdb47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sagitta-gridsome-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ab02f0beafb5fa437dd180f105f309ce3d3df62066c7a2ab2a0177deaa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7211b4171953c4e9f79f3fe9e5a6d0d27eb0cb456b57238fa36191cf3f046f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-castor-commitizen-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d63d7d06b5a118a91516b5a41f47e4a941c8c4b433eab51718c01dda4b1f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-library-cors-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1eb5e8c227964d009dee2eefb0f42f87b23ce32debaff53c017f95232a8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...