MAL-2025-161468 Malicious code in nabuf-otimmn-pigafofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de9b9346beeee278c398c618e30f0a39ff6f3d62f634b507da3248e17b7aaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b61ca3e1c59ce28728de34beb8dbac8972455d95780f068af223f5047e02d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150220 Malicious code in @mipta1/sdada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f538a7a3facd8ff339bc12f068cbcc35b5fdc61bb4b17517e65e814bc3d412f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153670 Malicious code in billa-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881f559ec0d21150806151bf41d27a9f6e624ee0b1b23136f76af606d7351c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167426 Malicious code in teagood-nalikami28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f724f8e8da98dc030a634caa9c77934604770a694cca93fbc7567f7475735980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167272 Malicious code in teagood-nakamala100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5e3d33c9861fd0e897e564e3656d193ce369cc7b4f8939f4c71f6664d38204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167170 Malicious code in teagood-nakama1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83bb8f2172b59c1c07b294120a321150b990a3460a7bae683c5882179e86d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159493 Malicious code in manadsi-soroiaddi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfec8ad061fac3cf7a95e6a70511364f6075f941c3d5541c8d6bb766344d0096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159416 Malicious code in manadsi-sdda-midadarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4bce12c18b51986d96c7addf4a4d2d461bffb2b9e0f35c8481197f6ebc450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167863 Malicious code in teagood-yakuna102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47bd7d61678c7e78b2f10dd483302db8cc819c5bfac8b5b8757925fe98a519d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152271 Malicious code in alfiansyah-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6db1d0b4c99e4926c81b20a6161f8aba6a6b2ef4301daa325b0a685ead632b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-exec-foundation-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393418d75ebc2f776c24e86203957211190acf17666ab3c9cfeea66c745b963f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-fusion-backend-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 014d99acd1501becd1077febb9a8685ac031547e536086bee7f85daedf576a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-commitlint-element-ui-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a3d65597b1872dce212f078d80bd723a120e7a0170a87d2d02ddbceaa1b49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sedna-nextjs-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e307a27a7c1667b7b33c2efac98354eefe51925d335545339cebbe0277a3aa8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147329 Malicious code in resolvers-karma-leda-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a7885561d4f9a15a76c0b8ccaa063112fd94b8899f912d7ab979e1f0bc78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147173 Malicious code in rehype-impulse-webdriverio-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d663cc2df1cbf1299f2e5768e87b102d9f8ed51c2a21762524f1959577dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-spica-yakutsk-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa73545e08c8581da0785fb2c246e476c0ef4e4731c126452998220cc1746b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...