MAL-2025-190128 Malicious code in user-root-node-transpile-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fd90abf836916236fb0bfdf86638679a1ddca3a44139fa6e3a6462f6ab36b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-steganography-slides-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 796ab19af8288ef87fc08c84b75032e9a955512cf76daaf4f031d635f7ec9e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mineralogy-oauth-eslint-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe44d4d94ee8dc2a076fbd2c79e1f212e27c5eec50895aeb116768be0b5a242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182920 Malicious code in itale-adci-gnygyyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80cf5e6263f7adc72f627f2796ce50de1a72dd474cbf5bc9d31d9ffde49f5928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184602 Malicious code in odasv-knilu-bofavaunuffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9deabfb9250c6d0d86204c2df519f91b7124fa40f48dd1df9b71e58be3f34e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imodiov-kufni-cocakma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4dcd5294a15426b42149fd0b96a4e1230abc1d472d1f1c869a1daf3e3a9c9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-atim-kubuaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8283e8e4dbd83df7aa83335e637e882d26516428a16c144ab499a23b25de37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180402 Malicious code in teate-thy-sonic-funli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da146ade79370f9b8dc7e528bc6697c5cda46bf4954a084f0d2c670c44c13e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-taowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25de4ffbe1a3e47a92189acb946dca4e41b2327f39e1e398d6cabdb930be7ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-pugfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd5452bef3020ff45eddc141f40c5e83068b1c99fbb25a48e8c0623ee51c622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179399 Malicious code in zaskia-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b17ab48f57d0c1b8031d0cfd8524492cf2e06ae5d5a894904d764f5464dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174276 Malicious code in goodaan-ngafa-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c46af565ce71d838d727ea7ed0547f90859755da4e6ecb1ec5c10f16fbdaa8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177112 Malicious code in nuyar-amair-taqaaibbog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e45eb71e562b6f271cf704e33cf52cfb3a3e3ec5eee632778190348f6e6f73f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179293 Malicious code in unimana-satgub-naboaib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235bba5954ff3346b0bd70ceb172abc47bd3ab4eb50d02ce6815cf45c34cbb27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172601 Malicious code in verts-otimon-ofbogia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ac47542b50204b78c18321451e816ae169158a82b1db08c44ab1e5e9f62a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomoi9r-osaissac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19a756ab218ad56931cd29f246242ecb91c6ffe689abf6f06a5eb88ba9a2c65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in my-oss-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19749bcd09c1fe1ddaa063315f352faac5574223a1a3611f1034982ba34f02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/sayang (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e5de6823f24cce2c0d98dbd34415f73685a9fd88b504f141b2a42e04ae0900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168399 Malicious code in tealove-nameka18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d147000a798703843e3ff6de6cd3d6305ba3fe3fdde8fa650ee9426fe74c8d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d450082fe716820e3ad1fd6eb29c71e6cc1da0d154b2ec0be40164ca005729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...