MAL-2025-169493 Malicious code in uaragia-mudiffa-syuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d18c7b13c109080d53443b621ae3285c530b286c10500f1741c7d90e7b26dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169000 Malicious code in tehah-mkofttifra-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f99547b2727a8647f31cb7971fb320465eda40a7490fccc72c33b05be2c66365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161704 Malicious code in nabuf-otomin-nosdfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2580bd3f4a5005f22d6990e28b0b42ed3dd33a2c76a91b93a285243ce0d6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151701 Malicious code in aciaiaggu-idat-gfda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a85fa1a2ca01f9d125e041d2c5d9b083a7f5b90625ee8aadd10b0e4309beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155485 Malicious code in guras-visa-koreasela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6ab02e640108ccff5d2cc336972b09e2bdb824ce95f8dd152da086f6bed8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149949 Malicious code in @mipta1/aseswar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2268af5020b4b99328e12b961cec6e81a22cbec9659b0e9057a2986d96286f25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150901 Malicious code in @miptaa02/rassdasdzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5eef8632f09906fce790960af278af350ce5eea42a2c9ce9bf9655737394cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155659 Malicious code in hafiz-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96669ab21ae973c48fa196bd1f45fd675d45015fa2bb1446f5c6e0b03fefcd3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162050 Malicious code in nea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e5a734580408887236177fc8ec2d72da69467980978324779f5dc66996645b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153503 Malicious code in avomainah-fragas-ofafufau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ecfe45829d10efcdd68650ac775a261c5f633d7773cfe16a385426d4605768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-norma-quantum-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070c510d6aabd42a9359f70a061481de692e33fe124a1af5ee60137ae925f95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-betelgeuse-nodejs-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a214e3efeb5ab890583b8fbdd9950fe8de1f2f78df13e65aaaa8892a71e73dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-orbit-yildun-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d493e8fda77dc1418c68e0b5c3ddc494015c5b69c056b5cfb9f768378af0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-writable-spectron-webdriver-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755591c551de8c2c5232708dbb1a9adef2f6add41727bc872a1cfe2b72206ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-airbnb-remark-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300e1c61b12b3d1767ab9e42820d1f4b77d4cbb95072146fa11f5d53d1d5e4ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f527d979b805966a29c97a0f6ba24c8df77bbdf6e19633f45420bca5790374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-dotenv-safe-delphinus-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642878f7ea02757310af6a4a32229ef548b1d47085028952b7c4f950221c7adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-auth-nova-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e345ac51f637602bb21180a5a15e0c808801e9c9c5860e07eccb477eeb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard-aquarius-css-loader-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec05f0a48a6171709e472121b4da1b9b84e2fb0444facebb8acd27d908e38b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...