MAL-2025-167972 Malicious code in teagood-yakuza16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1d8d8b17d19b78e7da2f957fcf4fced9f9b95fed526132b0b325621b52fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169623 Malicious code in uarug-miuafi-suatfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb01e3052e42a7722fa4acb41ab401e3066b0db079bd3bb8b9e81e3d18438b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-uajai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145d53c9c1ea1ae4fe858e024b2246b307a20db2cc0abbbf6712eb472e7b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cf51df292a41e8c4d55a5d4567abc0ae5bcd1ad22175f57da255006e35e78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152768 Malicious code in arif-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97f986412703adc04b1e8c21102dbfd394e785559a8b9e60691568d541d2aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163351 Malicious code in nokire-rara60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e96a07178b68cb5e02b9fd4b4a32afddbe5d39fc28a747bdea8f102f9309190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-okta18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c11b760c76bb6ddf943aa11299ac87fce5e9e8f69061be4c4aa1f6755a12d8ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158731 Malicious code in lookingan-namala21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5049de5bfe9494af84685ee064b8b8676e984815315278d3ff4838080fbf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166291 Malicious code in sunden-diak-vamikaankalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf219e48a193d44bbf5338389e71a021e97477ba5979553475cb213e528de13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158616 Malicious code in lookingan-namakita1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f340e2e194ebdeedbbbe00a6c3b464e08aa62a265a0ec8b7a4893b550f0f8182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160401 Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165424 Malicious code in sabua-muyafig-budafauaffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571b0c4777b12e0ee5833f3dc3970eead5ecd2bda6ec892390b044e93a06a000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-apollo-envconfig-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7581617c1f3dee8f77877ca1efa376a3bccbff72945c680780c545962c3ea85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143827 Malicious code in janus-prettier-stylelint-cross-env-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 791b1dc189284d27d4648571cf5f77f50d62b3a6a7d3d9030af59acc5e12c91c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-warp-mongodb-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06ae7d6ff6aabf0154b5632ee77933718e1f2d084a2c285b9fb72e9b2dcdbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-writable-aurora-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f2a474d3e4a74eab03cf604f088784cff2d8d6ca11d9e9518f1abb8775970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...