MAL-2025-160057 Malicious code in manurung-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d892bf0d6062251938a00dc10a17b676fdbf6d08843b02b71cc7f852616d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156716 Malicious code in inufgi-gotumafa-anz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fede9749c357e2a01f78de73551be4872331e2659e0a8986a6ef514e4cc7d6ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152541 Malicious code in alvito-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49070a91d8d29621aebec4849345c0dc242b025f7f26e9431a6491cc0440c5bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152713 Malicious code in angin-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674b68aa832686c0581b80cb23c8419f14025a93902302eda3e23a6712e5619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149946 Malicious code in @mipta1/asdus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bdee9a3265e5e25f6daeb8dfc83831b8f193881a5d1185fe165d3c87b0e8085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166313 Malicious code in sunden-dibok-inumaliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd4aa45c834c13961fdb3c876551366055b6837f3b7576635c38edd6322c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155896 Malicious code in ican-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bcb9ebfdbca8dc56dbeb28d4b38ef937390f48fa487c7cc3b256ccbb593cd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-epimetheus-selenium-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be603a6ccdba311fa78ba451f8072a751787808a917f9b9d7795778a7aac3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-gulp-bellatrix-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6373b65f6de2f3650a7c758c470a6c57c3364116da0f1ed56b7c095fbcdc50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-phoebe-meissa-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfc3ea1ff019850090bbd63cd756abc2536600f47a0f4c7286e87765eeb204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-karma-remark-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b675f3b0e242eb28c37eff42047754b0b896cbd5ec4452299033902d1bc3b9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-callisto-orbit-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517427dceb0eb545cc4d3437a5e1f5e1e0a84c52309c6a0f22c3484d4873011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-hyperion-fusion-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a1954d8bff61dbdd15f863a66288338f3f7e1bc2f81afc76343916f9a31925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-typeorm-playwright-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b45ccf4ee6bab76ad9bed53d6d091231fa0941b9b2c632ef2e7b1592e0fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-neptune-rate-limiter-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25740c87301d8949f3965642361cb4c16499d9cd27829a6d3075b22acb3e4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...