MAL-2025-155778 Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162655 Malicious code in nokire-kilua63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52061643fc724aaa60a852b76dfcd4d3c1b9f596a52f7f3458286e8faac1e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153918 Malicious code in bufani-muyu-bafaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a4a5e93358334862f0c4b69d0365c80f204a19f3b69aa2e93a11f0739f31cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162767 Malicious code in nokire-lokcek15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbf4cb4d12a32b466507bf6e3cf3331b55f73a521d0bc89648e4428e78f5e23e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154409 Malicious code in diago-kamuli-lukakimak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6dadf9c18e8869bbc94a554c8fa055e23214be0deac447f0376a2c107b730a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164376 Malicious code in poliaoz-aikk-alini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bf874421d4d49e57f032a7fd1b268c18bf9dcd64c83371cc05b66ced13a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150643 Malicious code in @miptaa02/fhfvxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57851cdfd4e14e40aa641c35d71e6e8a298038e12b19563c944ed7e46dcde65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167782 Malicious code in teagood-sukuna29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ffdd55ca1bda42c5c9a1b1bfe57f3fee2ce1b7753d403f04de307df13743f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159289 Malicious code in man-nonatai-utgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd2aacc23909510bfc8fbc87fed7ee16bd08bc58711f0bf08a5fe6cda4cd483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153906 Malicious code in buatafa-buaaat-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291b162c8d5c3bc242f9d91be2e44c0b9962467fc0e638893e1fe77888933682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-registry-sedna-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43426488caa65ceaf277ae33df4839e7ebc26fd723dca2280a380133248433ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-publish-concurrently-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40ca53b27778645d89b96eb595882242733d814a4cfe82678efc4b8e67b9ab61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-forever-bootstrap-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2664a9a6197e54174e920e47bfe1732ec24d3916eb0c990bf54ccfbe187e4e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-colors-aquarius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911081cb46abd2de21389ef7af5d7911dec4ce37cd1ff6eec6f1cd82585dcc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-odin-deimos-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01bc67b2111bbd551d0c9c745462194540c9874d0858278baf52970910e982f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-protractor-loglevel-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d16a7033d42bdb4fbfafe22f856e5fb27e0364dea6cc4a01772b651a18961d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-quito-jsonp-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae03c7a0742f8e2587452301650cf062927285e3053d9a6813b17a2d81074355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-ursa-aether-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3883d3f8b0e6337de853aa12f51a368247945a18528374fe17fcc9da15d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...