MAL-2025-170159 Malicious code in upilkianula-lukuzili-ilakzou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df40fe4e959e303ba8e0098fd97dd885d99fd686d76e2e11671a498374c3c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164318 Malicious code in pitra-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1de1055b35e214730563e2ecf6bf273587ccec04d3e6039c08410a5bc83347d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165500 Malicious code in sabubaali-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715d0fb62eee38010d99dac90229fa10be9530dd9d56b647f9b29f0c286d9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167810 Malicious code in teagood-sukuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6c2a99c241c1393044c53d5ff87d7443239acbd3411fa4e2710085514a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170289 Malicious code in verify-ain-aiusamaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72cbc5d642934f55ec9f7ce197036c77f8c69c3248acc49f54ab9b80e62166c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169277 Malicious code in trevora-cir79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adb973e29124f14aa0e962fe58b63f36d29731b6e1c15e75e3e4ba1de84ebe5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154110 Malicious code in cinta-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ed080b58180784aaea52bb8b9909e98d643ccdce7ae45fa3c0967d869d6dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159682 Malicious code in mans-manapa-nuts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c6650d4bc9f3fe350da347b0498c83e5a2ea97eeba0ca6ecd4d1be79897788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165618 Malicious code in saku-aiaku-unusiakau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e33471080bed336abf474653af974b464fdec04c2fe79ff00018adc6763970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151993 Malicious code in aibuna-mobiuple-amzaeiua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14928da7a74a126c62e739fe5ac38f15d31ed92afe38671b7afaa3bb9a0d296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167914 Malicious code in teagood-yakuna54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf6de5bf150660b3159dc549fd9f6263dc5007ae76e6a688637106478dfa72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164966 Malicious code in rita-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab3c207a427bb98d36a2d424248c171cbf74621773fcf0e014a7bd89543e7af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150945 Malicious code in @miptaa02/sfggghj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e301fe11876b3ce48fdd141a1a3a05ff211284ad76b094a08f482e8eb232c175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-alphard-zenobia-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8e9a7165f5f93e0d2ea4f71fdcc15e596029699a897d1418f935127cda681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-procyon-betelgeuse-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e6ec9d293aa050ea28a3dac80d3023398df9d62f4a0660466d4fa36a0c7834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145951 Malicious code in parcel-build-castor-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86d03db2d5330cfeba064e29e8c36f78fca0430be8e57ca4e45d5a6b398028b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-start-link-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f11757735a5d98d1eb0e745a37506fbce530b534d155ea6fedf6397a676c837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-auriga-aether-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f82e60419a165c24112425c2a0eb8ff0de0e758fea71c85f94dc4322948d01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...