MAL-2025-157272 Malicious code in kamasada-nati-yalufara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653238faa8247bef50d287bf0d5ede5291dd3dd8984adc4cc9ed7f857bd33c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163548 Malicious code in nokire-zabuza57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a145e994af2843d9fc9f92681843bdacb870fee8a3ecd70ce18015e4998510c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155401 Malicious code in guras-kalimanjaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a12f4be9517e63f7aad09e927a5ba3028df13cab60b0562a9ac2d55e14427d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151506 Malicious code in abiuna-mobialue-amasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05377cce9d775c6d56700292945e539178120a4c7d8ae335adbbdf9b64eeb38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163878 Malicious code in nuilava-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b47aa02fbf6f758ab5be2b430645a3a4742a885dedfa76184fb02dad0f2481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158276 Malicious code in lookingan-konami18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8beb78b06447dddaca137206d96510f4541b66e5d995ad85cc60f108819b6402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158804 Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156759 Malicious code in inufi-gobali-jaruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae885bd3fedc77082d8d1569dc426a063feb8accfb411081eeb94b1bb5677da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159544 Malicious code in manaf-natui-nuatsy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452a30c3a656dd75609104b328cc3629182e8281c4e8a7463e53d7ff7f376311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95887df8c8df5863509fdfd3fff81ba967b3699f79b8fa74a05d71e0200e1bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151700 Malicious code in aciaiaggu-idat-gfada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d74d306962df7e169c02ec92a35be8f6cb9dff3e92350c248ae4b3de0c51a6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158381 Malicious code in lookingan-nakomi23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0801e022f6368625296d77910b329cd8205729f2fdc5a02d8b2c1d49189d23ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-jabbah-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b31ae985f128fe19af9bee9ae4011ab98d52966a366502d7d9f65c3788a3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...