MAL-2025-166749 Malicious code in teaa-reborn6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a256f77e64631a4bb2b86d6965c6090e19da879d6eeb5261a27cde3d3c937d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163487 Malicious code in nokire-sekiya92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5471043ff1401c4ac5e085cd1fa21e8577ee48a038431ef8183f9a919d6596fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153156 Malicious code in avminah-fagis-igamfyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324523b212c31d82d3665f5f09f3f1944e0b5a91a3d05f1097d0a2d4f4a1e776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150466 Malicious code in @mipta19/wjgdub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071cea5e1711c92b9e718b7cb65480e667224f331b52135aae4261ea87cddf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e15d60d8a7682bab033fcb7a90f45d802f80de22c0993de5a6ba343ff9b9a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169469 Malicious code in uafaru-tumat-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77aa2ebb11e72528dba5cf8ebe4690d98136dc38be65128b1711c8700ec2a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163430 Malicious code in nokire-sekiya40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f8eb6e688f893fa5697400bf1d5165f20b63a4bc5e82f99fe088d145dca5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166587 Malicious code in syahlan-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc8d1a53183fae0043ce3e4f177941bb5b5e2dedd41cb70435808d09c5585af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169564 Malicious code in uaragifa-maranfu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594d8479014e9d6608d12512aec57f6c6958d84ac1569e3d8d10698403292dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158762 Malicious code in lookingan-namala5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37f7fd4ceba634663cf40326b440e56226518831e5068bb0a4981107fe5ced3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164801 Malicious code in rinto-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4af2290066acb154a232bcb10bc6440d321ac0a6e6822945d3447750f2723a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162960 Malicious code in nokire-nakala10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847c1ee064c85ff67d5e132d2163e262ca8d724c1240b2bcc92da78898a4281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151874 Malicious code in aiboa-moloipe-asiaoamaianu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a50b7eeff10fc508b0ad3535411f0802ecd83533f7227cfa1494bd16d41443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-farout-corvus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776aa8f7c9d309fe1c7adf4274314326d23bbc25bb64f2734590f54fd5bf25c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-loglevel-odin-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b321c45b81b732779a0e076155f3dfa0b59bf86d2bd3064660daeb735949ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-eris-fornax-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab0f6f4bd6c72c6356b5c351cee6d85d6bc45ac5ec86308aab75f45f8865400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-geckodriver-registry-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e691b494fb554671ca898f3d2640e4da6553aec0748d059613a514ed6b731bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in command-eris-telesto-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666ea0249d126b4ef46d2141a771c393d1ff2c7876db21ce8aa957302f0de3a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...