MAL-2025-164500 Malicious code in polymeria-nuyiagtso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d709c4d157bb883e2349a64e5be6b5c93de8bd2dcfa85c83c2f2c5ab08cc889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153707 Malicious code in billa-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6b731e3d01a499ddf5c6024f4813632ff99b5326f70693ebc378b6e6ec616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163005 Malicious code in nokire-nakala51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36550ead7a09aa04d7296b14fdf12040f68db54120d5ff8b5705750656104f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152204 Malicious code in akanai-ala-aimava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c36ecbc4af419bcc63b0f62a19c650cade5dd1354443b6163fbd1dbecb6127a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157910 Malicious code in kupai-ukuta-joki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b03acff4aeb5571744c1edb08426d6519a2e6704e10b697d6a2f11f0a7ff1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158944 Malicious code in mad-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934402f5d696e63647def889f526f5bb97b2e7b95ca299100a2007d127cfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157756 Malicious code in kuinsu-luki-kopanusntiumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26f8805d428a157f6f1e4389635c7af13784e6c20c2f9efca8b7cf8e028831a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151981 Malicious code in aibuna-mobiule-amainiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b93a460e2a426d6f1ea8ff7c6fd183bde082a464c8b949950c13b17fd3e034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157646 Malicious code in keyla-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb54d5bd28983077ec5e1faddb739c2dc9331fa90d141110f009b6ce508bd42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167936 Malicious code in teagood-yakuna74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ae5ad89c753f09e77a951f1c5fe91f9569bb7f7bbcd908282d7b2ab1c4ac3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165844 Malicious code in shilang-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eeb7e43408e1f666221f63f5af177954141160c2ec46477de169e7ed92b8e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-orbit-grus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0325ce27bd89abd4c5ae9d6f7e37c7bb7c373892a59f09c7ff589164e0edbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc146fbdfc420e6edf55add804abf5db01e4546ae4b3d20978b40a12d156f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-spectron-webdriver-blitz-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8223b54c0a122db06940c034ec46cf12370cd47368b39da90698dcafc458ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-nodemon-envconfig-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b669250f4fcebdbadf124c20bc3e4dceb6d196ae3e3ed41e89b7c18078c0ac43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-meteor-loglevel-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b18bba8537be01f314354880fe98c1a5d78968515d4da7f6a90186d3453541f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-run-script-prompts-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ea2258006845312d46ca56f78e72c5ffbae2d7e22d59b5775e81b258d8558c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-sadr-ophiuchus-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feda0291d6bed0d6bc08e9cc14832ec5fb222ee2ed5ea483dd4932982f6b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...