MAL-2025-158789 Malicious code in lookingan-namala74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd665c1bab413411f0c9a00c1eb3b83fefd47f46463cad8dc55a27740e0cc223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164132 Malicious code in pilka-kalimas-nulivauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d75340e25d34c84dd32388aa4a772b761fba5f12da4033dfbe95d52809e1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163109 Malicious code in nokire-namiresan55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cdcd7f4334f11013bc9237e5f117cee728bb92a61681aece837dd1fdc3a93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157028 Malicious code in jelek-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c0c1c191ec0a6cc8a39711d8634a0587d0719cd252abe36868b6334a9fe7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155212 Malicious code in fitrok-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951f690c99aa1da2ad6a71d91c7dfcbe57bd168fb7dd70832954ce1bdcbddcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157528 Malicious code in kentung-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6006f5242e397758ed2a286c28886832bfd6fcd39f41e3477292e672046a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157656 Malicious code in keyla-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f0288a1af93850369feb0088c84d3af59a76581152b8f44e36aa38b9ea9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153004 Malicious code in aviaah-afgagaganfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381cda565bb424edb6d491d7780e202ba9dc1ba4df568eba9e9da976d798b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e80c43be16fa4235dede1d4ea13d3274181479ccc459fb180beb53e57059c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-commitlint-config-angular-gemini-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88776b0e7b1a7004d098a5bdbfd304045d25452d6edab88e8ade08aef0969c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-parcel-schema-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76b84d5791a3dbd892a09ff247e6fc2d37a23c1113018b013617082887cde9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-venus-enif-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d086f3c3518497d4ae4dcee831d523bd73b0a05e4467a5ba429f860ddb95cae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...