MAL-2025-164335 Malicious code in pitra-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc8895fb1c48e299c8f54deef4159d4154c74b0ebf610c6ba5c3b8fb0fce037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-foruai-uajai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145d53c9c1ea1ae4fe858e024b2246b307a20db2cc0abbbf6712eb472e7b6652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cf51df292a41e8c4d55a5d4567abc0ae5bcd1ad22175f57da255006e35e78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158616 Malicious code in lookingan-namakita1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f340e2e194ebdeedbbbe00a6c3b464e08aa62a265a0ec8b7a4893b550f0f8182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160401 Malicious code in messi-vutsa-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf889f317b63120f201d9531ca58d466e32736f2a63bf5c6c9902ad168e16d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163351 Malicious code in nokire-rara60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e96a07178b68cb5e02b9fd4b4a32afddbe5d39fc28a747bdea8f102f9309190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167972 Malicious code in teagood-yakuza16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb1d8d8b17d19b78e7da2f957fcf4fced9f9b95fed526132b0b325621b52fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fef5a8b43204c075ec730b7fddac7b2a0535ec08bcefcdc7fb27330175f084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14440727387e5f1f6307159ff786ed181e3ae53d17d37565bb0e3893d6649894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6995b43d21ec7b8452ad66b58fe47ceb803a5645e7343a40962230c60892510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-magu-naikafuam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fa82a7c06a4aa9201ed3d3ea71957c667efff9829fe8f431c853cd77a6f8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165859 Malicious code in shilang-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645ec49365109fb8271715518cb173a6b5b225902f719da5a035478662ffc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166291 Malicious code in sunden-diak-vamikaankalam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf219e48a193d44bbf5338389e71a021e97477ba5979553475cb213e528de13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152768 Malicious code in arif-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97f986412703adc04b1e8c21102dbfd394e785559a8b9e60691568d541d2aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158731 Malicious code in lookingan-namala21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5049de5bfe9494af84685ee064b8b8676e984815315278d3ff4838080fbf7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-apollo-envconfig-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7581617c1f3dee8f77877ca1efa376a3bccbff72945c680780c545962c3ea85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147022 Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...