MAL-2025-151989 Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157375 Malicious code in kamasada-nuyata-bubyati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a07d22fa6e522fffbda3e5d21f776e1328708155fd25d9891ea866d8be290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168791 Malicious code in tealoveness61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9987c4f19b1b981fdc445d919e50fdcb44aeb1101b8714782d1a2b925d94b852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170131 Malicious code in upilka-luzi- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe84a893df3bf2c9813cf73068b78ce7e0a16f4897a12f95b7f423aa1f09b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164788 Malicious code in rinto-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0215c4d31f8e54f3a4a55c0c3d36a39e8a4d19e288192af5b0d51b5728b2dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159309 Malicious code in manadi-scaiasor-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc63bb1011bb6a817c8ea4671b105853c15f187a8ddf7127c93f561e9a9ad48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153204 Malicious code in avminah-fagmas-dioga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3304ccb1743474c224a28e6c8cfc76c0b203234ecc4747207a327fb0e1c607fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157080 Malicious code in jimmy-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0186b4f64d2657660cc7e36038a3790d05b6a68b9fbb0c4cf292f12b81ca3631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167695 Malicious code in teagood-namakai40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0811fb78b9b6a822da7cd3e4345ad04640da8560ce6f8128e7f1d220adb39fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-centauri-less-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957fc566741844af0c99ff38cbca3b500d39ae7fff7e88fafd0d84fa24ea5a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-airbnb-query-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a326112cffbdc78e4226c40385297d39c2cc350524c8450de4b31660a6a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-readable-quantum-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d8a82e61512f1a6df2bf946c62cb03f61f7c4af249332fcdbef2b6f9f19af1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yildun-rocket-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4d699a320a81ca1190a4392d025f16901a34bc4c57d0e8a0a86c5e26aa1a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-inquirer-astro-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ffcbe48d8e1d6ed0e95d7e609992f48ef97bd31136729a5141f9a3fb4c0424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...