MAL-2025-160235 Malicious code in mattu-mitboip-buatada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b9eb527e3db2c17945d260344221007d15de2c1d4eb567732e699f9fe47880b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160298 Malicious code in messi-buysa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69df1a1c62ebd0aa09385ea9961018e8acea1c2c2e6d7a64967ad001faab8ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168508 Malicious code in tealove-nice3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388103a90964a2680badc7d8c2a5495e5bf7fb3b33c03a9725e12736cf0ec9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160753 Malicious code in muda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16153529fc5d8e5e18a815e95539df4aabe16c5bf790dfd9d0f92bba5a909932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162028 Malicious code in nasution-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f234a776a0b5f162f12c73d2d0180197952b87f0787abac6d6bf879676b7c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160557 Malicious code in miracle-dokoi-ikawaiauli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60367d759d0818d31d4f401352c15713d6ad5fc422cca8c91675f77a325c658c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152795 Malicious code in arif-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa260b7120a82ef5e97f377c25f00a3dd5125e0a403962c32352fb2b695850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152850 Malicious code in aril-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fa590bfc43b89a63feb46aa8f4cc5ce9ee822966bfc9ac571bee2271de0fa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158983 Malicious code in madan-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe149b4fd36cd85c9f8e2fa414db5986a352aa7a05b8acb636d23e9cda26879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151191 Malicious code in aben-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b299d70ebc002cda4da0e84f5b265c63bad0f702d16c10abfa3d50c6cd4877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157449 Malicious code in kapovfino-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc322f8778f90b4f80bc08fa7f0609c2ece2793bdf451eb04afc1c6690b2227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160943 Malicious code in munir-terd-tun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fdbd28c086638b2a48a5220dbcc9aa8eb4e4aa77dd84d7af9feb53615f15bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151115 Malicious code in abeh-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3678365b23d2515c119b98f4b290b78a88f21c085a76dee373e5338475f0e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152945 Malicious code in astia-alabki-malolosiskaiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d23f1668caaa8f86d1859b3bc70acd1717a0c8b41c00a190ea39c373fb4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156846 Malicious code in iqbal-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67b98746e9d7d4eca2ffd7af447c1986ceeed1a2c1b6872d1274782cbb78921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-miranda-levels-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cdd6fd77c1cae9a437cd5bd642282b813a08cc3826fa783055b41a5c2d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-terser-mongoose-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-nightmare-markdown-pdf-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b544b8a10799f8cfaa90d200b1ee4bd48eeb09502f92148037a2541cd7d678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-ultra-vega-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05255d72e8ae6e33299cdcb4fffa857c7f8faa9e68782e51c45a4fd800b36a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-airbnb-pino-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b41bcb691b34ac087839ae6fbecee64c8eb6f8039658ce929656436fa9030fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...