MAL-2025-164574 Malicious code in putri-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091e7483e9d98a6d86557e92f336fbd1b177847dea1cf99bf945e9521724d8a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162191 Malicious code in nokire-abimanyu74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599d050030e81277aabf72044d18c55e0b4875a53448284b80a9a6593bcc6a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154740 Malicious code in dioalgo-klop-kalobaksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d90ab3ce572da7a17da97f425f4c591f97f75661530a076b2e0b001a1b02d39f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155180 Malicious code in fitrok-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14c33f0f502452ee65ab49626ec2b6fa9ce8a6b451eff1a92640fa3f1770d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157188 Malicious code in jurss-gsasasd-9sas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aeeb628005b052090342f06e52495b766e683ad29f73aa35cf8ea9b07c96dc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37719eca12b241b1bae04a15817676be50de75eef441a7fe0b37fc5ba5ac5318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166938 Malicious code in teagood-lokika70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089ebb42ad2c6b5c31b07f41e883523feb082c233d385d4a445443f26d73bb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159512 Malicious code in manaf-asin-nsadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55fde04b6bc9d859b2ba44b92c084ce851478a623e3e56cc497e2227881c9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155094 Malicious code in finish-sf-maewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96e573187cbf4f15f2c724843744a270899eae155f8a3590a45efe3e14c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0d0cc6a08c3adad3e053a69c8ffafd4ef56c14d50ff1e1981a2e2f41c6f9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-local-phoenix-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fda99e9af2d5c829feb9d0c9439538d13e85d62aa7ea9fad3e708936139f476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-capella-nconf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5dee520074e43f20c631e67eb9acfd0c743d02d0f0683e038630ae40bdb9b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-meissa-mongoose-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755d7f15634447caff195c0e42d582e0510b0866ba8351f28fd2b97db8b87d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-draco-radiant-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef4283767c604951c602fff1cabbf32b15abda81f6a7f587bc4a8dabab43c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...