MAL-2025-157656 Malicious code in keyla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f0288a1af93850369feb0088c84d3af59a76581152b8f44e36aa38b9ea9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159600 Malicious code in mand-nomi-munu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e512f7eaac844b2902ca8b9338811ef3422b2b76e7e587b378fcba3ce3675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155121 Malicious code in fitra-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0a01f2ec450d1b8d7ba7ee5e46a1e2e3115640bba95e0e62aa8c99c3695bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154694 Malicious code in dioago-kamoi-alauliaahanoki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b60239c36b0658f2e141d4025883e9252adb2c402704118d0b07905c0630db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151719 Malicious code in aciydua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff957eb868b146a7d50dc37b1966ae163463291301cd4f0b3833ccfbcffbc300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158798 Malicious code in lookingan-namala82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61752e0ab6eb1f50dc4d4419df5ae85419d06dd13f1bafd970c3f3bbfa8246fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163907 Malicious code in nustar-miuyu-nutyufafian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d415aee5f3b89f42d1b909ab338eb85eec77f312686d4469263380cb0b18fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afai-foaaghog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf404dbe9e0a772e4fec6bc46e7b15cfb2161b598d3099f91062a0bb566a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1876100ab7cf7fa2387e98b7b85f3642ee0387ffa6649e4ebb16706082fcef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flight-danger-fanthom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be882fd01b919c51643da2203626f71a1103653d37a1f471a4ac8f29a91ccb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e31c0fac9c75286104e4b4972313c244f6431343622573e13adbae09fcc8d8a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163387 Malicious code in nokire-rara93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd62a6295ce794735ae8e4f4d5134ae3331333d89c1b2ab11a6df8fd867d171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168776 Malicious code in tealoveness48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b0dd8d3532b94d77950397a2f43c3718add6c925c47957160c77dd0d3300e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-acamar-pino-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31f52eb5feb86456ab516fbdf3dda48667262ff5ea6e7f05e4fa7fb2ecace47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...