MAL-2025-158906 Malicious code in lookingan-namalaka9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab72603a08b19e8506fc5511f68d91dae85c75e506e604d815461e8deebbc049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165602 Malicious code in saku-aiaku-umuaialaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0416e9660b4ade02b9ccc3411c4e73462ed73b1d316ec1c76d857d35eb93ffb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164806 Malicious code in rinto-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b90746f0bef3a0527f9191d65c1bf7d6b21784d5768180a30cc5acd00154f10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168316 Malicious code in tealove-lady11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42cb4ecfd4773fe3439d03fc8f7b86e1225c22bdfd35fc6c62df09b54f465e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158678 Malicious code in lookingan-namakita65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bdb5111e65fa99d697feb6bc9ffb22b86126cffe7747f08dfd63b1f1b00d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164351 Malicious code in poli-akilamu-lunakiunamnai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4960671a99c6674eafb54c5c11831bac26883cadf15ea34fa3613af6b16497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162258 Malicious code in nokire-akaza45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7383b75c0aac3a2ff116532de07909de16e7aadbdfa499cc4d7d7fe64d00b957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156608 Malicious code in inufgi-goa-jamufgaiana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de94ab69bc2485eb74dc7f417d6eb9ec7b70f79d3b5b667adf7719635d986a80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166938 Malicious code in teagood-lokika70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089ebb42ad2c6b5c31b07f41e883523feb082c233d385d4a445443f26d73bb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedr-minadus-buie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f866204b08e49786bab69eeaf349b28664138d1d988a5d240581ea41ff715f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155228 Malicious code in fitrok-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442aac2fb861bc7dc28268f309384400465556a30564a2762428727a5a3333f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150699 Malicious code in @miptaa02/gujd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f600174b932149476ee104ef1fba4e1f21ce7cae35fa331478bbf5fe58cbb9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166606 Malicious code in syahmuda-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c0f61e985191fc0f62927fe53b684ed07a7c9011bc86cf5fb9fdeca0aa2ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162430 Malicious code in nokire-arjuna2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da1a455a63c5be5c8d34df8c9d0373f86a467642a2b23333fb42d5a5fe4850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-adonis-quasar-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007b2f11f8fdda0da7633f2f576840f23f5d98ec7af1de960701ee7d69088ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-octans-airbnb-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52c4b48266ddbc2d30e438b7ca57c0588832e7159519b162bf2f752252aa7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-nodejs-pino-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24968e7924be81b0a4de90c0dd069b7b1e511e2b7bd3252f1005da9c0d0dbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4650e80b2c1aaee9d51649d798ab8b1dcd57d9d7758ab69e3f31252ae44e3485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec74ae400b0640ddf9fcf4390f177967e895d9cdcffce66837c6fa60cadd3106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-proxima-luna-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 032b46a7c35878764942f46ad73a78e19d4faf29fac6187e1e079f0b21057aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...