MAL-2025-159493 Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167170 Malicious code in teagood-nakama1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bb8f2172b59c1c07b294120a321150b990a3460a7bae683c5882179e86d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164458 Malicious code in polymer-intsi-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6f6803fe6fb84ac1a8eeb84ad8e9aa2d96406644709facfb7bbf0446bfeb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167426 Malicious code in teagood-nalikami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f724f8e8da98dc030a634caa9c77934604770a694cca93fbc7567f7475735980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167272 Malicious code in teagood-nakamala100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e3d33c9861fd0e897e564e3656d193ce369cc7b4f8939f4c71f6664d38204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170488 Malicious code in verify-taicui-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e19377d32278ee6717bee407ed3ebdc7a49b3502f7c81aa1b3631cfd63685e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150874 Malicious code in @miptaa02/nyas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a9827e9709f4403fb6cc46ae29c538de2030fcad5f51d1f7c6ea0cfb00f515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156082 Malicious code in icha-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f95145935b006419aa320ab92ec1fd80c8de9186d0fe5d5197d7e677a3ab05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167342 Malicious code in teagood-nakamala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bccd9a753f279bc90713954dc695c9e3ec432ae25af9eb772b2bceec642c5637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170504 Malicious code in verify-tayic-iamsunasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc01de84b873a8d7acf0a669e67f8a2cc88c5388526bef4d02bcb5616cda884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166209 Malicious code in suharta-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc3047d9391fb02bf9e44d81980dce6e3bf9dbd099b306bfad16c7b97c5f221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-commitlint-element-ui-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a3d65597b1872dce212f078d80bd723a120e7a0170a87d2d02ddbceaa1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sedna-nextjs-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e307a27a7c1667b7b33c2efac98354eefe51925d335545339cebbe0277a3aa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-vuetify-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3e180e9f01360ae15a1ed1c0c54fcd8e78edcbc812170d9b376d7923c62c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-spica-yakutsk-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa73545e08c8581da0785fb2c246e476c0ef4e4731c126452998220cc1746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-tailwindcss-wolf-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6136f0bf4e96ffb80b8fa0636d975fe1f01d92b14a4af0786a0d25f26d50b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...