MAL-2025-152711 Malicious code in angin-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6871fb8964505144615d6422f003eff7e76376e2280aa213485eca152cac177f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151500 Malicious code in abiuna-mobi-amuasubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a1a6de03a106bbf8fe8aada29f0d787829c00f6f734f6a59af6ed5ead6859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160974 Malicious code in muny-nutsdr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317859b496a3f5e06081d2bd444c6e85ad95dda35493c7533201d68b2bf8b210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150522 Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162328 Malicious code in nokire-arhani18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea14f1053cdac0421a2997157bd7044af76582130ec27284b4db62ec97d86a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158541 Malicious code in lookingan-namakiki31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bca1814b9c1309d0876e5b182299bc2973491170369b0f12f5bebb6ae9629ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159417 Malicious code in manadsi-sdda-middarida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0953b16a1191bce5f44e20cd49f8d13b48b21fbb297afa2005bc8f1cf9f39ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163051 Malicious code in nokire-nakala93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197827a4f629f1e152883e7f7128c903cc7614851a3612db4b5eda3611aa549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152330 Malicious code in alita-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8d64b3841315713d4be4dd4253771ff3abebc1aded8d916054d5e0941ebaf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-futuaf-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3d6fa9c21270d1b34115c03ec9e729105856b61f0a8f1d9f67549cf911b346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-firebase-local-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceadc074463bf36701cd49c234869395b1d563165730f2883014fd0532340a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-firebase-supervisor-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a09f7f0d9ead6a273ab5178cea56b022f83751858faba9668dbe82686d7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-csv-octans-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3ff1d427c6dc5249ebd942a1b207b0ea02860a4d1ee16fa12badf4b8206eae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-algol-ganymede-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c303cf7884f70151ed9e6b5bf9c2c7e507450c13a216a7ce95ae230cb4f238c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-magellan-typeorm-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f18449376b83609646a9b250f76f59430fe7e04389cbc080054e433d67a80a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-babel-juno-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efdead4ed42f6f74b60a3017dd381e0f65833d1f1c15b4575aafa8193a99305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-backend-comet-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af761dc5140f525098aed3c47cc1d795a86700f2c528c418a56ec570d847fac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-nestjs-juno-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f7590f0ff3753b613157316d13bfbe14edecb65e1df69e658f416e56c691cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...