MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157528 Malicious code in kentung-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6006f5242e397758ed2a286c28886832bfd6fcd39f41e3477292e672046a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154435 Malicious code in diago-klp-kabkuloima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cabfb86938e813fe38b8745e8c72aef2fd66326fd954f78e1306b20e97dec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158912 Malicious code in lookingan-namalaka95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7528d3c70e5f507ab8c262ff1eac5d541dc761dc094c09c6c4f7440861358ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150979 Malicious code in @miptaa02/tiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9b09bc284d23eb2b48468391af3c90b3062fe2f731b917fbc2daf84af1bb490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160092 Malicious code in manurung-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acb15e568008e1484114933854bfb0eb9c06752e5b0a6f2b284b836757419e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155283 Malicious code in gifa-ot-uofipfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95125abfba8f224e1c742d4869e0129aa826de52d8a84e23f681689333ec4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157656 Malicious code in keyla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f0288a1af93850369feb0088c84d3af59a76581152b8f44e36aa38b9ea9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164132 Malicious code in pilka-kalimas-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d75340e25d34c84dd32388aa4a772b761fba5f12da4033dfbe95d52809e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163940 Malicious code in pajero-cir12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248f03b8001b05b6a36d27b49a238ca573ed15119b420b019500fd5cb22b3e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-husky-europa-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec5ebb87d9beb9b2b0237447f6fb1b337d45c7d61ac2ef391f2e1546be1a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-winston-mensa-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725ef081ecbc32e0eb2fc6dabac94d89410f091e67dd4de94eb0795f5c7e7db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...