MAL-2025-166063 Malicious code in slamet-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf16dd72da2f5f664f006e4fb0241a3b8f30dd5fa82256f5b425a4a4f77f44fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153221 Malicious code in avminah-fagmdas-diogrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebde5b99462ad61b975a62d80ae9c14e7573a137d51818a3f89584e47488fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154927 Malicious code in fadila-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1526d927e60d166c06d92c98b56fe0d3e7126ee64c153f2b182f577470f5b288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156881 Malicious code in iqbal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf6c2639a3d7c73d3c0ae8b7b82049c55ead4df4ac0e75ecf8a255496e06b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163731 Malicious code in nudela-afogsaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e05650fd6cfc33fa8be8a931fa231ada369c1173ca85bf4620c7d2e98df0fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161459 Malicious code in nabuf-otimmn-afqofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 510552e9358d49e00c423df94b90fb5ee78266da99328f42ea8cf3a460aa613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169881 Malicious code in uinsu-losiat-duk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9658d2a5dbc4a918a38b998931ea7098c8300826a239a0a44cf26039c17532e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166542 Malicious code in syahlan-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabb4fbbc2c542eb2e26a24278eaedacc39f028629fce7f011b78f2a9fd134cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169484 Malicious code in uaragia-mudashai-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d993bec8674f897197b8d776b05d780e6ce5e74b16024fac6b06f55328d17d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164580 Malicious code in putri-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e07c57c054fd5e454aa1ca202613bef2536d763142e926f9e7ccf1cfe1da15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d39c63373ebbe32787746fc06593d6be06e6f3fc99ec21eff8f35cb6d9e3dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...