MAL-2025-162563 Malicious code in nokire-genji71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a29a76626b2de2335b1bd404e816af9d576ef6be82889557502b52c1490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169861 Malicious code in uinsu-lista-patumabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903f477046396d7b95032dfa03b55bc77e0ae19f183e6c6b61f73d751c16d2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158804 Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158276 Malicious code in lookingan-konami18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8beb78b06447dddaca137206d96510f4541b66e5d995ad85cc60f108819b6402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155094 Malicious code in finish-sf-maewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96e573187cbf4f15f2c724843744a270899eae155f8a3590a45efe3e14c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151506 Malicious code in abiuna-mobialue-amasbioa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05377cce9d775c6d56700292945e539178120a4c7d8ae335adbbdf9b64eeb38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164053 Malicious code in parwo-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c66ce7d99976a5179b6e9b40076897cf0cef65fa4700190a7274138ea41a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157646 Malicious code in keyla-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb54d5bd28983077ec5e1faddb739c2dc9331fa90d141110f009b6ce508bd42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157285 Malicious code in kamasada-ntai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a0b2bb0e30687a7dc48d7a0e32115d846a38402a912d63e2543393c2910076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158381 Malicious code in lookingan-nakomi23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0801e022f6368625296d77910b329cd8205729f2fdc5a02d8b2c1d49189d23ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168891 Malicious code in technical-alnbio-tolimasyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db4152e464a3482db35baee44976ae892479300fdaaddd8f2369a71936df3939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhadafusfufi-nyfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90479de048ba8ca99432e50d380505f8a9debd7379920b0d647ffe8e9763019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159512 Malicious code in manaf-asin-nsadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55fde04b6bc9d859b2ba44b92c084ce851478a623e3e56cc497e2227881c9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-draco-izar-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637d2ce4aa2c840283bbb45f4f703c277c08548669ed22ee03f7ea74bd5d784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-spectron-webdriver-blitz-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8223b54c0a122db06940c034ec46cf12370cd47368b39da90698dcafc458ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-standard-dependencies-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f31cfaf6351f3bb47ad16bf392d1e308291d0085dd4096e670b4e63b6b8f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144599 Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...