MAL-2025-150538 Malicious code in @miptaa02/awe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16663d3f976bbabe88bb9b2478da3323d1869dc111a802aabdf12b276df93f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159392 Malicious code in manadsi-safifda-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecd46e29dbc1be5b3895d179877966ee8d3743597464d42858be3d56698b1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165916 Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155866 Malicious code in ibanuni-ota-ufu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457aaf558bcfbc095704889febcc07fa1047db928f39da89b17f3d17b1b06bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166063 Malicious code in slamet-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf16dd72da2f5f664f006e4fb0241a3b8f30dd5fa82256f5b425a4a4f77f44fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153221 Malicious code in avminah-fagmdas-diogrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebde5b99462ad61b975a62d80ae9c14e7573a137d51818a3f89584e47488fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154927 Malicious code in fadila-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1526d927e60d166c06d92c98b56fe0d3e7126ee64c153f2b182f577470f5b288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156881 Malicious code in iqbal-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcaf6c2639a3d7c73d3c0ae8b7b82049c55ead4df4ac0e75ecf8a255496e06b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164279 Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153008 Malicious code in aviah-afa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6c15d22cbef7c0bea26c1e6569bdfeed4a66c0f3f6ea5e9347fb4eb384265d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164580 Malicious code in putri-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e07c57c054fd5e454aa1ca202613bef2536d763142e926f9e7ccf1cfe1da15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-scripts-virgo-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fd601f39e0fc89bd05a7cddd3309efb425bd6ba552c9066f4999421f0c73d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-ursa-process-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108481acf0733a6dcfa4494b50cff9fd397842b2c03148422adf1b8d22d76315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-fornax-ini-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635fe853f926b64f3ffe8ed1be352a1c5361633308b5d473efc4932804483edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-ultra-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf641d61b7de3dfcba8daa85c5581e21a1d8f2b58e574d6a78735cd2319a2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...