MAL-2025-163751 Malicious code in nudela-fofa-gafsaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b72760514c6272300cd2b920c35bf6dbebb43de921f6b3b2ad3665327460ad7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159263 Malicious code in makani-aiavamoba-ufi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e1fe09fd3fb55079c96214d03969d50a7a542cc686342b56b3d5c565c28fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156322 Malicious code in inagi-vma-nuagbarifvua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57602be73c1689a9f7448f5f0059c89d28330c2784e41e592894de100851299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169194 Malicious code in trevora-cir139 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdfe12570fa245e8f6ccbbaeb26641136658df1f6910deb465bc1398ce2f07f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162343 Malicious code in nokire-arhani31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f0803c4902a220f620f6689bb4a3db2677a651f0cf45688519996ea7c4925f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153047 Malicious code in avminah-afiffsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5765700412a7a67fd7c0a869ce94c133f186cf9badc89ff60b70286fd78880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166228 Malicious code in suharta-poke94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf70a1c4c80a397bb902293546cc17cb3063791909c3d3fcfeaa29040d5233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-affa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7c86777d759c511fcdfc4c911c045710d4aae5639dcd0bd0b1cb4d3add49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b85508853f46b7213a9d8f49ef03e2195fd47eac6c9d0317f7effb4292dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dilak-nuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa5a279dfce4ad47029f6f3e4ab4ce93c0282aa94e3ebe609953de0e149ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-sdubda-ssdfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6877726d17ce7738d1fa5774b5e5455e9fdeb09c9843032ea682444ed726608c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fsak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989f549707e525d508eb036f8ce54bacbea47b8c65bc578d6766ba039f126ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153151 Malicious code in avminah-fagis-fofyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9743fd71574176835d966dd9a0f971b51148e55a2c1cdd754eea47673357f125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166899 Malicious code in teagood-lokika35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cac66dc76c88990d6f042b02c9ea166c42fd6b4c4c09039c4ac148909e9516d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-flare-loglevel-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f4bc63028f7bdf21b5dde2af04c7dc1efbbfd1ddf8c87aa557a35e399bcf6c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d439e6d0efd318a80fa9c0aea306da0ed1764f4b7940acf1510246b972af2942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-chakra-ui-wasat-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec117436ad133721bbf94fb343fd278e1bb42adaab428e6b43814a7fc786f736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-magellan-passport-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe105f7d3d2143861bc708e763b757a9213789de31bb48056bdf89c9db6fbc76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-mira-cypress-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff288bd799235397c87385876fbab2931d12fc07d382d64b5053e7de4fba340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...