MAL-2025-153415 Malicious code in avminh-afi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa98af2d7f0d7eac1f080e8ce6c9685c659ca992e68053a90d784afa70231e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153285 Malicious code in avminh-afaais-fifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91e9fc414ab2065cab9366f5add0ce960145b8f85a22c6c6b94a18db8440b7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166916 Malicious code in teagood-lokika50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94cfea582c226968e344aebc02571cbd7c77921992d7550126a2f1a665aa983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165441 Malicious code in sabua-muyag-daifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0265bb15ceac62436425fff4162de83ebb862adb099d96c709fb91004481261e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169815 Malicious code in uinsu-lisa-amaiyanba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08cd890c4d557f2ba68067ae077e72535156844f18ac48919dbfd63c4ce43670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152836 Malicious code in aril-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d2d5a73a8171def99f0f9c56ac08dac121616aae0d395c27eba8ab0926c527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164279 Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164107 Malicious code in pilauka-kabi-kluana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a57fdb9009b633e1657a1ad6f5260e0da0924126f7d84b3f90a0fbfd70ffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164580 Malicious code in putri-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e07c57c054fd5e454aa1ca202613bef2536d763142e926f9e7ccf1cfe1da15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156225 Malicious code in ilang-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7caf930ee8ee89cb1b7cd0d7fd91da2045783c0e89694d8999150756dd9e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158993 Malicious code in madan-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb00a9863ac4fb08fe82a17a68019b5f346fc80bc8a03cf378da5bc51aa5cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-winston-less-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5865ce4555741b83e7e2292332e129b48064cdba03fd7b905da6b142e1f64b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-semantic-ui-elektra-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1da63aec152820d045eb1a524542bd027d82aa0a13ad938501d35379627961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-hydra-radiant-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b95aaf98636cceb7379e4df4336d4d867d914021b5a92d636bba39ae4c0381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-scripts-virgo-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fd601f39e0fc89bd05a7cddd3309efb425bd6ba552c9066f4999421f0c73d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...