MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160287 Malicious code in messi-afta-fuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933a56284c407da2ea9900ec88df823a73f080777212e1ad25633a04976d0a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153206 Malicious code in avminah-fagmas-diogg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527acd7c3f1d7e29a77ef892ad88f9cceb80dc8a1385ec8536b9b1bf4a011d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152397 Malicious code in alita-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1a69344b680a0a8811b40ba4681350c7212cc3c4156f0f4e73cd33ff230d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163800 Malicious code in nudela-ofgaf-gafoahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b15e3185feddb56562d0725ce1a46488061f1c8be9641e5c4d95c9a08bde4b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162058 Malicious code in nitaaus-1sfse2-reff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9c18750b35f26abb489e636174bbabf228bfe96d058eabae63297d59fd6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167386 Malicious code in teagood-nalikami113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbaeab4d425a4776ccc9556c1d43a386c794faa41c009cfca66c39dcc5090194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168776 Malicious code in tealoveness48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b0dd8d3532b94d77950397a2f43c3718add6c925c47957160c77dd0d3300e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157528 Malicious code in kentung-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6006f5242e397758ed2a286c28886832bfd6fcd39f41e3477292e672046a6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bb9bfe57fb4809dbd6676baa049cfe51c043216507ab587ac1afafbb8b9b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165567 Malicious code in sabuvauakli-nalabulaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55bb6dee3134755dbf9204c4fe12beb191744d2512af24139870860ba910415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151719 Malicious code in aciydua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff957eb868b146a7d50dc37b1966ae163463291301cd4f0b3833ccfbcffbc300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150621 Malicious code in @miptaa02/fgbg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e7921d091aaf71cdbd2b14c5a6f7108b485113795166fdafff8e290d64d45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-eslint-config-nodejs-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bd03acfb41ff6f5766ec626da59dcbf0d5d6d39c929f23e44e554bf3d2eac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-leda-farout-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b84e713521d8bb7553f1d14e06b9c4cba1e451a5100e82149ecf169a6e37a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-hapi-sequelize-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e0efe0a8a15392fa00523436d0d0daba79cd82d686ca3b848145fea62b9885f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-relay-request-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47db78c95ae987d173aa06cd11ad9777df685935d01b883b22c230b76637f93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...