MAL-2025-164574 Malicious code in putri-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e7483e9d98a6d86557e92f336fbd1b177847dea1cf99bf945e9521724d8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169234 Malicious code in trevora-cir4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4eb22763416f5dbaf2ed2e8833eed84c75b33ba9f2d637a5ed039580da25a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163857 Malicious code in nuil-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05aa25d35b1d6cd2eaba77b5f84095a875f185666a4e2b7afc81861e629f68f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158048 Malicious code in layla-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591959f5d52fee529ba7ed7756bc15a9149adfddd73e257a84a286773153ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158804 Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166385 Malicious code in sunden-udilssk-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5afd8e40a6596861eb74707473e2d03f55902a993111d0a6e36baa103ea4e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163548 Malicious code in nokire-zabuza57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a145e994af2843d9fc9f92681843bdacb870fee8a3ecd70ce18015e4998510c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162330 Malicious code in nokire-arhani2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d091fd061efc16a1a74a9e3061b2b7bbf1e53dae644f7b1a9c29430ffeb598e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151506 Malicious code in abiuna-mobialue-amasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05377cce9d775c6d56700292945e539178120a4c7d8ae335adbbdf9b64eeb38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157285 Malicious code in kamasada-ntai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a0b2bb0e30687a7dc48d7a0e32115d846a38402a912d63e2543393c2910076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168229 Malicious code in tealove-dana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efa789ac208d35eb5233072748f2c4de31b786c00e4ec9d28ceeca5398a6750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157545 Malicious code in kentung-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af40890f1f37237f0fe91d54f6dd7cde7a9a52130fce765c71831023b555393c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155117 Malicious code in fitra-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04890a831aba83e6d49d86abaaa8cb4a7f616fbae02c335a131094caa59eff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156738 Malicious code in inufi-gobai-jagiagair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 379c29ea7f2f96444e833420678e3df691db3d7c8324d288c26dd6020bc6a7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-spectron-webdriver-blitz-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8223b54c0a122db06940c034ec46cf12370cd47368b39da90698dcafc458ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-standard-dependencies-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f31cfaf6351f3bb47ad16bf392d1e308291d0085dd4096e670b4e63b6b8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...