MAL-2025-151208 Malicious code in abi-alafi-avuaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af955a36a6c484c583773b3959c9e82e9af95142a3c4fc143205a2ec47c8a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154912 Malicious code in fadila-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7ffd8a6ee9694a74555c5f3d5faf292809c63eec0af5a0249ca241fc677029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168856 Malicious code in technical-albio-tolimasyur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65867597caaa8124c6b01130493dae230936e545fb4d38e01249ce9083ce0fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160942 Malicious code in munir-terd-tsun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586068c849d7cdc09cac8e60726a1cd9d468bf1307aa6af3afa37db36c19746b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150997 Malicious code in @miptaa02/vedgy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f009628b257ade5e20299178aa42c14c385cd87ab2f632104e0a6f045c9bfe86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150803 Malicious code in @miptaa02/kwghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b679bff98e1b2918b0b075f4d3ffafe37c2f1d74f18c9feabf02281094370bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167141 Malicious code in teagood-manaki73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73abe2677c0f4a34d74b7d78caad46b26bcdeec6d8394a17280a177453a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167448 Malicious code in teagood-nalikami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39497b012a854d9146fd35ce8765f0cf3cbe02faa1243f9bf830f8f4532f1263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162960 Malicious code in nokire-nakala10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a847c1ee064c85ff67d5e132d2163e262ca8d724c1240b2bcc92da78898a4281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155065 Malicious code in fauzi-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958e22e91ad20e03f90897989c606e2a9f1767bb76d82b2a9dbae914ecd1639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169564 Malicious code in uaragifa-maranfu-safarai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594d8479014e9d6608d12512aec57f6c6958d84ac1569e3d8d10698403292dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160562 Malicious code in miracle-dokoi-unisakiaiw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107398198724e15c47160474eb641eab5acdaeaabc2f0051716b795cd640313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157170 Malicious code in jurss-gasasd-16s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1766a647e537c4090a528bac92c27544c0a72b52d88c9013a2a6b538f888ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-cordelia-neptune-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3d9a9fba927e5ca91691c321ca12735df0f533a460cdd3bd694d732f2b364e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-readable-standard-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee74897cb470305c5a181b7888799edaf5856fa3361abf88d8a8e2f0f78bbb80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-virgo-dynamo-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87eea9ee7c4835c97d54d39ce1047878a38e683a60c2b71b75c36cd92504fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-prettier-stylelint-warp-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5b98d60581def47fbffb1f138672c4f5589cbd194e37757ea4734716c294b92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-node-config-eridanus-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677d88fd923cf9115bbee04bfca99325c4c905ce3195c80e37a50eedd33ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-magellan-telesto-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...