MAL-2025-181584 Malicious code in asta-alikif-dakila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1df244daa53ec180fc4d2a828e1c6da8aa06e1fd793b08f2af37e83d49bb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavaim-macovo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cc9559f6efdcbc4c48ca5c1433f4d5d1070185850de3a008165b4f8a19027c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179193 Malicious code in traay-pazap-paoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee1b3ab8390352c288a29cf58c99fecb3c6ddb4b45901fb87b33c679e7fff9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prayoga-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd0d2902c8c3fe7944887f731b7012d234cced5fa4a2b7685d747e1269e1a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-toafgviala-madasalakofio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c355ce59762cafd0a7871dd8f3549b11b9c8e1e6e77ea9989ae95dfe57d3dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150772 Malicious code in @miptaa02/ivao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2e85b819c0d638abb621dbaa4127018b4a6980d88fbd2d3698aefb99b125e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169050 Malicious code in tehah-nuya-buyada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb848bdee39ff11789d193a944e16c14b36b6ae3803846a747c6e385815224fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-publish-cosmos-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9568388e674b156aa64cb527778eca4e516be31d4c94ee45e60433044ec8377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139282 Malicious code in aldebaran-inquirer-sirius-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f156ebcb080250b5894ba54bc2119f15aea901db4121b5dda0df4c31a2490c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142334 Malicious code in exec-algol-magellan-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478b01df5ed170df1ae0b2edac7dd7ee42c57b7067a64d859876b12b5b842536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147352 Malicious code in rest-hyperion-json-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6808f6a254b6e4a43f70509201c590015d6715ac53b65322f9fb07b352c7f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131741 Malicious code in zaki-bakwan23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00327b4edc557f64f9aa63357e9a0305acf615598c2dc2b2d25fb85317c6979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-keraktelor70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7564cff19d8d9f8c25a4ccf00c228a1159027d708ef1a516e85f2336dd2af13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112551 Malicious code in ade-rendang14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f908763ad5623b043d83a56d69c34132c25e18ab8763c7883c0c736b8f2a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96695 Malicious code in sparkling_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12a78ddd183226e39eba136120f27932063f190071f6dea24133ea93b198763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a590210e029add152153639420e2f9e74d993e4cd253c420d2e1df38b5ba87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69088 Malicious code in left-fuchsia-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7b30d014a7c2e963db945c363a0b87b7f0b8f25a8231df93a029602bd76734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69023 Malicious code in juicy-gold-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c2c65069d17cea1417e66a5e084fa5127e8b014996a7398d5c6b5b865d8f620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...