MAL-2025-163666 Malicious code in nudalea-fofiari-aguboi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c28de52f216d76336f4db70395c40a5178a23c36f4acf0b3544c02e06c062a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155880 Malicious code in ican-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503ac9d7076f3c1bae9b59f429951c27dc62e3c8da72875f3c4175b03f5a49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150997 Malicious code in @miptaa02/vedgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f009628b257ade5e20299178aa42c14c385cd87ab2f632104e0a6f045c9bfe86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162855 Malicious code in nokire-lokcek96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21bb1b974ead1392a4be09c10b3a6501096149185e4d5cf6d5ecbc13819dcabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9508b9a417471b3af8ded6f50a1f7e97c2d9ca74d1b7234a0421a7c1f8b22fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152180 Malicious code in akanabi-aibia-ubau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f34328f810f3110d3f97a073bc0db3f75e856e9378a09d45d4073d6b4925c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152159 Malicious code in akabia-aligufi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cefa73b7346c5995f1ab14e30c1d91c737d30c55c75d2000189b5573ec899f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-iota-superagent-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317515e396939c7b4116b7f35bbb26a114b0293b399cec840e983081cd5c2b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-yonder-betelgeuse-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c945f5dae18315f4787680fe0df2b8745a6117d6af0a32e4b1857099ceea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selenium-registry-capella-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ab3f71e7297e293a72649daae86808b298edb1456fd5e8450176bf422af724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-less-loader-public-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab89e3eb545254371daacf9a56dc9363bf5b97df517aec1450925538803cfb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-xo-supervisor-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a1be4297ae91e7c9f380f7cda1d94309794c765c1723339327d6d7ab5c587e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140588 Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147146 Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145445 Malicious code in nightmare-rigel-playwright-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c7efc41fad8d61f889b7eebf60a8ddb47d40233875ab87da2ce0fd87cbef8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148432 Malicious code in sync-rigel-prettier-stylelint-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36fdfe2ba2f55f9166a1ca14e1f32bf78fab47697ed4a1450f221028760010b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139616 Malicious code in astro-redis-telesto-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace80ece3eb943681bffd65c77aca3fa03730f975eb6c4b2df89cf6ca178c3da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142560 Malicious code in forever-apollo-oauth-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90943887c088c5605934a7f3eb8800f69d5e476dce2f64c9ae90f658706a9516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...