MAL-2025-150555 Malicious code in @miptaa02/bvvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cde8bb52a0cf0bf82cee79240ccc1265b76cdd0640d0dc8a54d874da8d386f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155283 Malicious code in gifa-ot-uofipfuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95125abfba8f224e1c742d4869e0129aa826de52d8a84e23f681689333ec4d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168441 Malicious code in tealove-nanami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c6f2043256461201c942fd26e688413b0034ca1870fba4a04c99d7e239074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169319 Malicious code in trevora-kkiissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fe100c784d6f24b9b51cd3051d689b0ac4b611e36706959d25179fad28828a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154785 Malicious code in ewa-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d1efb8815b4f249409c4d5a990d12508e5e1da864a842a3657e63a93126559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156197 Malicious code in ilal-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5a9d18134222621b77369894eae87bcdbd90ddaae57880b6ae07d030c0c97f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155663 Malicious code in hariyono-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b9f04e420fc1120dbac7c32f42573afc5c589a9e8f2d57d6c5092c9135a680 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157527 Malicious code in kentung-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd09cec0f0d66909fcc590b7fa1ed129e1e0b1ff0a8ae5106521e76d1276c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nusta-budda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fcc75dcccdcb7bdfd633bedd57623a11c19bb40ead0d51d2bcecbc050d2f58b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156839 Malicious code in iqbal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27ddf328076ffb09bd4e0082f5375eecc8c77949318409d449b4a39a65f267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ariel-init-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2f1987be8277ccaf644d8fe9257ad83ed8fffef022e1637db2b250ec6394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-parcel-wasat-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62a7312843f5c6993959b1b1e02cd38fe30281e4bae43d85f034a6b46a350ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef04650962ef0157fb6aa6203575844103e5030f75aa4db08b3f35fb3d4a285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-semantic-release-eris-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0897310f2d4b7638a96531a08b14b6e2774efc0bb5cf2777926f172374a687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-achernar-orbit-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fe54136bb4a52990e8312c33b50c21425820079da86e6f1e7038ca5e0cad3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-hermes-kronos-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368597f4fc071540df5055bfc1b610466dcee895e63bbc57931f47cc3a3f0769 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f888f6623cfe2d44ae9d4d23bc7a06271164b3c4870137dd080e45dbd0a387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...