MAL-2025-151791 Malicious code in aiboa-milipe-apamumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 511dd511ec27f0d1e2882ea6ccf5e1b8922813793a2794e2f8ef3516b9fcb649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158675 Malicious code in lookingan-namakita62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ed1c8316b68e72aa26895c6201cbae3e15557c236cc97651c4410d32138d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160829 Malicious code in muklis-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2612d0789bf6711b5c6a32a44a9ecc99ae2992fc85ed12c5786aa6b21360374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158421 Malicious code in lookingan-nalako13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc2325659220f6a010da23d0097aeed9c376d9ac6e055fc90f288d23890b373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154025 Malicious code in carssa-tyutu-sdff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1b2c0b987d2aa4714c02dc20eaf5ecc395c47548bcc120ce9eac42b3929cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuroichi12-dfhsahj-fhjk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ea53490e2aa7c80aad82e7d6eabcccfef93a454a05c0240190b7e94f653094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160358 Malicious code in messi-tudassd-usidhfna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6341cb83ed69395cfea90bd02a8d4e34876190c8c86d016c94a47f5342944668 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167645 Malicious code in teagood-nalikoli86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae9229a8a2c428f5ff1eff6dc9ea48637657059ae4b85c5be5e14c75d2dea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142430 Malicious code in favourite-coffee-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9ca0e2b4bc589d1779f36ab439cb7a963d9e4ffdccc1e2402235e183ddd9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-postcss-loader-fornax-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a46307816ef7e2a4a5c766bce7438cb607b945a2cd4692da71b738b8332511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-canopus-deneb-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47d8400095d678d2c3e3a68ff75d19cd50df496f04eecbbf4ebf7d8b3de8d4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-vuepress-delphinus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d367d8ce198d4ed18d5ae4e74bd0b2fee094c74ab6e4d57f7c7b2a7582cbbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-hermes-oauth-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ac0492b74e5b2ea4569a72ef3f1cb2e2b3abe987a865f7fb22505c6071ea3ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-janus-auth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af4e08ee61507d2dfea640b983f7ea3e33015cfc6e4b78590648dd42816e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-style-loader-polaris-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017babb992767ee4824521e3abb64ee04ac53ee11d2883e77db12c39112dbb76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mocha-aldebaran-nashira-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1575e1db5935e5a93f31d629ad6daf1a3a9220b1bcba15d162499b8e542dfea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-loopback-lynx-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 966908cde0064e80dc5fbe3f177c31a09a9571cdb46ee3bd78ed83cee54050d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-rollup-plugin-jest-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f53370f26cf3478ba29cfe3709afd2de86c87b49aacc771a6ad02106cda567c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a22880454f6c3b89cc13ee3e15c29aca4689483d59fc2695a5b325d74267ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...