MAL-2025-169075 Malicious code in tehasdnah-muaido-nutr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50dd5d8c9633c09e4e38f58c11aabd9e3ea6559ac6437e7c9f37047b7b7799f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152956 Malicious code in astia-alabokio-moajikaif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd10e1f2129512df51a108030ad1696dc4f1ca746b8ce38df8edb15367fd522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154742 Malicious code in dioalgo-klp-akaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243e6cbf748d4e86bf3dba842d43cdd29d7abe3ac338dfaf4c0bd93bc4a780a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162648 Malicious code in nokire-kilua57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265e8d2c137c0a2783eb6902316cd2f01a88ec43b21c8177dc1afe5ec2cc428f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151788 Malicious code in agiyuyia-iaydut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614a934c124f43a5d36ed1e4965bca7a23c7865e90851073fdba6063e0139bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150975 Malicious code in @miptaa02/tefaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fbe1398df5e254311853451ce2be5904cd89df374b0fc0f510f12657fcf935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167426 Malicious code in teagood-nalikami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f724f8e8da98dc030a634caa9c77934604770a694cca93fbc7567f7475735980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157273 Malicious code in kamasada-nati-yl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1698d393f7f9bfe7e6037a676cc3c40414fa2d0efaa3d972b7f4f4e83b69ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159792 Malicious code in mansila-tfla-magazgoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95a08fbc3039a499c16ed55d175282f1181d626b69859b7667a7291b46b598f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159701 Malicious code in mans-manapa-riskifaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6799eb5f199ca56d42e3669bd01d23fe858124b33d2e7aeec16651f7df00b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156689 Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-test-unuk-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace42a4c3e8b7268c7fa20d143fba3393fe9fd70a9bad5324be5916b4c15d85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-apex-docusaurus-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc98a74a3af4e2a01d84572d7920f29b7b94965c15aa269833d16a77ea18044d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elektra-init-protractor-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032e8238a6375ae58cc650383f15b3bf4e597ee8fa88e72398c702acbd328810 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-run-script-norma-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd668333dd4330da852b8a90a702cf0b38e7a8f807dd442277790b997ee2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...