MAL-2025-168577 Malicious code in tealove-nokire48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178231c2a2821d70f902b11df8715585e8ed616519e4b445639afddd7bd7bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168947 Malicious code in tehah-bautaf-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f36d33615aad1f546d741c514c410a50981bdbed9ec451623c9788ef40e838a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153017 Malicious code in aviah-afgagfis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe608bf0072ef3f4bb3880c7f22b8e67b12daef0de6a9b4384ca0b39a881f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f987e8765c3bc87daac3015925a38ab05628e79b64a5b96b51bc1ca6e0f9dc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162947 Malicious code in nokire-loklok89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5ef21a87bfd62e56fe2128b65f25d571f2bc902a49677bb8d3b6d48412342f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161613 Malicious code in nabuf-otoimn-igamofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665eb1d60b41dfcf78a437d5b8a805f804108663c273e932325aa4e7e5caf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161220 Malicious code in nabila-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb998047578fb3425a3d3ccb32196269a1d659142c0631f8d088611c5302c4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150315 Malicious code in @mipta1/yisadas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9763636cd5a0f6eab7885ffa612f1dc4816d320f32436ea39d37a714794fb11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145300 Malicious code in naughty-peach-tortoise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84af096b40742c307055c83962ebbe7c7b2d5e18c6ae933b0ee25a523d742fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-sagitta-tailwindcss-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e01aa82b5cee7d7f29ead05831e499f5b5cc3032624bb089c35c97543f25b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-module-node-sass-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb6f9246b4340ea2d5b3f4d1f7e17c9848520a29053562bd88b04d07b97aa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-server-airbnb-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d39e51f8d9f7bc15046f50bb2eebff5f7edc6e9d0dba9b05ee803e679f340f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-polaris-loopback-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f79d04e4807dd38afa59089ccfeb76f68af1b43076a330232e0bbe21e1da2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-impulse-polaris-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dae9f06594bf0c0f9bf149fd6065ba7e289724e2ad9f2bc222b94bf5de59733d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-blitz-nightmare-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1d5936815c3f7fc7fa7cf85c4097e6689d8d83126c8007b5f525d2c2e31530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144648 Malicious code in magellan-meissa-oauth-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4147b208943baf94596cf907bc52cb7fb8253b2b9fbb50010a1dc78ab9237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149365 Malicious code in webdriverio-dactyl-node-sass-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d82883c4820c0624706b644e21797994f6a8e2cd33da1ec89e6da0d2cded544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145290 Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-ursa-soap-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42154cb3d3d4f013e199a8286637184259cc713fcc3019d47b1fba096b9e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146710 Malicious code in proxima-configstore-postgres-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780dcbaec41c4e20250e39de2cf359cc95f8977765f504674d4df2184b60f365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...