MAL-2025-153921 Malicious code in bufani-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61937eb0da506a079f96a67156f7bc48b10a1dbd87a730dcecf8457ec4a0068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166899 Malicious code in teagood-lokika35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac66dc76c88990d6f042b02c9ea166c42fd6b4c4c09039c4ac148909e9516d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153579 Malicious code in avomainah-frauu-faqida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae338c565abcfdf16cfeb3869b9875acd4a1b80f651366626b4670aba4e5cd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160515 Malicious code in miracle-dok-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7b2050298b1282f272f246713a836a401262de59fee7568b75ffd6ace0d0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160298 Malicious code in messi-buysa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69df1a1c62ebd0aa09385ea9961018e8acea1c2c2e6d7a64967ad001faab8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152850 Malicious code in aril-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa590bfc43b89a63feb46aa8f4cc5ce9ee822966bfc9ac571bee2271de0fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157449 Malicious code in kapovfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc322f8778f90b4f80bc08fa7f0609c2ece2793bdf451eb04afc1c6690b2227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152795 Malicious code in arif-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa260b7120a82ef5e97f377c25f00a3dd5125e0a403962c32352fb2b695850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165369 Malicious code in sabua-muhufafyu-tadamafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d333264cdf7968e844260aaf92b833e31930ba105e2a00a5ab16fa41cc7fdf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150916 Malicious code in @miptaa02/rgmu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcc7250e2cd1d267f056dabff3a90dfc75408ff9dc4368d3de4a9f7913a5270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170193 Malicious code in uyafru-tut-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0d767303db26adc68124d9570518f2e255b3135e9fc3bc1935292c37f38db6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153742 Malicious code in billa-88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6028631a31c8cd1a77bcda9320c50530b8dc5ad827ac78e84c6a86f30edc0421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160235 Malicious code in mattu-mitboip-buatada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9eb527e3db2c17945d260344221007d15de2c1d4eb567732e699f9fe47880b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162028 Malicious code in nasution-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f234a776a0b5f162f12c73d2d0180197952b87f0787abac6d6bf879676b7c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156844 Malicious code in iqbal-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b87c61f58c1051405f287c90b8a3385e4fde8b6bea099979374da9bfeee58a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-ursa-rigel-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bfccea257902995f50333344f6cadcf7150cfdd31b9f5dc79dc56a4e1d2a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-child-process-halley-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372d84cda77d894b3852a08cb80f633fcea5878af8dcb2e77b36f8b26f4e35e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-configstore-cz-conventional-changelog-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0a3732e31985a11e0193d3314a95967bfe48f5cac077d7528b1c51f6e81c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-uninstall-dotenv-safe-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49759109d1cc0acaae0d1c9cb915f880b6b52ed3d85f7b976f092eaec0eb2d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...