MAL-2025-166655 Malicious code in t-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84e11e66fe284c711eb287567cf0d80a6b5ac9783fbec275c9c641319fe1c19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170470 Malicious code in verify-taic-alusaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8103fe83a0fa8ffdf0cfa702ab18f633e5bcfe00e57407f89b9d896a9c077b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b2a8fb68d6833e34aed66a484c90d1c70dbc3a5d157bb1d4bdbc88761b093c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153113 Malicious code in avminah-fagias-iffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c71292ac706619312ac22fa3d5d9cc1a608e28b7e6f1dff675f506ee968d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154925 Malicious code in fadila-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33d7a1bdddd5e12eb6b7449bd811298aedbdc47611c87d90529a80f63b28f820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165136 Malicious code in riyanto-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438df45741530ebb5b86303324ab2acf75dcf29e75bec08dcd5983c439ef3e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166034 Malicious code in slamet-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce65c259ecb2d3e62a03360ffbc239cb14a407130a573e98096a3621259e9325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152579 Malicious code in alvito-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8805e3bafd074f822613e8c964c0918b538efc935134e6222fc989ff33409e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162655 Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167100 Malicious code in teagood-manaki35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6a703ddb897d3504520c19d78729d9346815b7971ecf1e58f691359ddb4641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164376 Malicious code in poliaoz-aikk-alini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bf874421d4d49e57f032a7fd1b268c18bf9dcd64c83371cc05b66ced13a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152713 Malicious code in angin-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674b68aa832686c0581b80cb23c8419f14025a93902302eda3e23a6712e5619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156738 Malicious code in inufi-gobai-jagiagair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379c29ea7f2f96444e833420678e3df691db3d7c8324d288c26dd6020bc6a7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-deneb-umbra-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97473185bef024c93924990cbe14eeae502c2bf156a233ff17b916ea9c0aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-fornax-yakutsk-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d4146fe49f7b6256b420a78fcb513ed920fd481edd057f15304dfa337fa61c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-rigel-google-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa00510f131cb0ada6321519fd077233b972d1024a024d33eacca86d2b04e6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...