MAL-2025-163456 Malicious code in nokire-sekiya64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa72511f7bd6b20377307c7051f85b4c24095aaf6830d22afe4e6b01be1d218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152607 Malicious code in anaisisulah-pauflai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b412ba77666a5fd2d8b8cd4392e31cd408a556d31a5fb79ac4223535392cc6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150982 Malicious code in @miptaa02/tod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd5a6837cb2137e339f1542f1de0166a81cfd4a4770f4dafdc20fa20e0d0752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5457dc53d272bb4ac484ab88fdabe02cb7bec67b737e7969adbbaa13180394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goa-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d50f9ffc4f929c5937d649d9c2c5352e65958084f19c19f6c6f149bb0a8389e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f6d043da5c01e5fe704524d2a74bc731bf8c944bc0ed0035dc9cfc355349d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168089 Malicious code in tealove-aruma33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb8dab42931a232affa1faedf6d6c8503a57ac4c47315328f8bdd7b0ad1ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169430 Malicious code in uafagaru-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308fff617e4c5eaf2b9a4ffcf0320a1455455547117d7db5e06b329aeb48f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152492 Malicious code in alvira-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3567ccb291e514f0b9e651c86dc7273ed3e8a422997e5eab6235f4a8f6aa1da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167150 Malicious code in teagood-manaki81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef188f6949eb4339a26ade8240a6ed3d33b183b8e4d4b02e724a5a3d7bbeb044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155157 Malicious code in fitra-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7524bd7ec2804a29f31ce610def80232e46742adf2900397a9199d62844de90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-toml-mongodb-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ccaa2ebfe16419da2c790aab04492f0b9cc5ca3df72aeabe287589dfcf607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-ganymede-impulse-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd4e423e4a8baa3cfbbd0fa2de90cc13372b6f2fee6ef4a79521af5809045b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-private-module-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc66d2a257a4cae15833c68e90d0d126ae595afb14baa589948057e3b8b1c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ganymede-jovian-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e769bd671055035cea71893fdb0a3a7e4aa2012e5d37a9d0e0f609d74b13e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145948 Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...