MAL-2025-154172 Malicious code in dajouka-faa-sa8a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dd7c7b5b3202d650b6050def438a71f3792ba4375526d1a0f705a17279d737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154553 Malicious code in dian-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50671a67bce851c5090999c07f698b105f48c2a46cebe06c6a7ac0d9ab662be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160913 Malicious code in munir-nautyt-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689d55276275d8494e05a3ef1afd8b74ddfd019eae73b9f0b4ebb39ef594ced9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169548 Malicious code in uaragifa-mar-safufrat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3939ff6d64a8fb566a0d366138ae78564b9d20e85374247afc032ef21b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152999 Malicious code in astia-alof-danaipik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210e00c1f5a87de63867d5d974dc8f5411503f8bb0e78c522c53e1d7249b440f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168322 Malicious code in tealove-lady17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824f319b828bf636cdcda7c305da599fa52f1e75950e7230a4a9b5432de3db2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154173 Malicious code in dajouka-faa-sa9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a44fc865febe301b0e0725554bbe5978e5ece62968c57d6f91cc5ddd7254a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163077 Malicious code in nokire-namiresan26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afd292e6d244a028e737e4b16cd1e13a76172ab84a1bfa21b0372fb09618c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162943 Malicious code in nokire-loklok85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc67fc86e256c7182df79fffb2f7eb3a4b8c623c615f1bd688f8b3292e5a6389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169473 Malicious code in uarag-mafsituhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147752 Malicious code in secure-amethyst-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541ba38431b3780400e41d81cb7535fbf96c476433a77d61021d97bc81b7b709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140261 Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-relay-chromedriver-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096e192a224e6245da34ac9aaabd4b13fbd2de99af1246befa43a62dfdb33cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-spica-halley-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161b803565d9a0152ff60b29160803c2711840c6794f148fa262660e872d602c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-publish-apollo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c03f11a829c2bc6b90dbf8fccd6788100da66f690ac6c5aae274f08fbe6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-release-it-reveal-md-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9509e3bf3c60fc0c4f421aaa2b37563dbf7315de8d4cbea0def2c9ff216cbda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...