MAL-2025-160309 Malicious code in messi-djhhoyi-fssae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a721694127e3a360f13dd96bced35bf2e7614b40590f4608cfc257b9a6f962c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155466 Malicious code in guras-tuyali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5333fed05ed8a2dffa791b3c79bd41e22679eea7b385013ba0377e02834e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170136 Malicious code in upilka-luzi-ilu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3105e7dea03d2e4eb4b1a03dcbeadd383afabd63418a58b68f2e946cb35e5da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160785 Malicious code in muda-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45b753ded55ad2dd813d0e945b00e934353ce65a7d28b1874cb5abff1948185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159690 Malicious code in mans-manapa-nuyadyad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e83af1678a5e8dd0394038771958e578d5f694bc88e995dfbbcf0597facc838d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163638 Malicious code in nokire-zenitsu49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfa8ffd123cffd9b314b26363b8209ae84ca987b1f02c6acdac5e9a8cf13e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165519 Malicious code in sabudaaopa-muyafig-bafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0b599e9b98cacbd5b6fe4788927fb5423de57516f5707e064c46f7a3c7fc4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160198 Malicious code in masioaluan-ofani-doikubato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b8c645ecac86f259e474705dc272e0e1dadbd65cc29528edbbeef36ccf152a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150306 Malicious code in @mipta1/xsdsoopa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c45d0172a225ad4baa3d4b5f1919afb7f13085c0df02d247d193f89dfff75ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157948 Malicious code in lala-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1caf2bbb75d4495cb4a59950ca317f1458bda4c9f19b14c03c7c0dd89f0b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-firebase-local-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceadc074463bf36701cd49c234869395b1d563165730f2883014fd0532340a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-firebase-supervisor-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a09f7f0d9ead6a273ab5178cea56b022f83751858faba9668dbe82686d7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-csv-octans-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3ff1d427c6dc5249ebd942a1b207b0ea02860a4d1ee16fa12badf4b8206eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-algol-ganymede-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c303cf7884f70151ed9e6b5bf9c2c7e507450c13a216a7ce95ae230cb4f238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-babel-juno-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efdead4ed42f6f74b60a3017dd381e0f65833d1f1c15b4575aafa8193a99305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-backend-comet-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af761dc5140f525098aed3c47cc1d795a86700f2c528c418a56ec570d847fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-nestjs-juno-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f7590f0ff3753b613157316d13bfbe14edecb65e1df69e658f416e56c691cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supervisor-miranda-despina-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419a8fbc6fc410da36fd23007851d4f52fe1bb11898f8c3f8cbacbc2e24103ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...