MAL-2025-168874 Malicious code in technical-aln-tubuanal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed9deddd64db5e9e8c406e6c0dc87aa7336450ff1d57652eb89ee4f99cbec53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158170 Malicious code in lintang-tea13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6552c3bfbcadb806ce9f7f3487c959c7804d5ddd923138964f18db6225b201c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156062 Malicious code in icha-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48330860a3254ff5a97e73bc56d79adf3a774d2536b9ddde56cfbbfb7b7fa8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162504 Malicious code in nokire-genji18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09020577b7611611b5fe984c81937481bd06e6754d92b95f179537ed64c8ece2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157804 Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156130 Malicious code in ilal-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531dbc33d3285beedc8c76ab601cf2a7c4a4db0fc41695ec7c74c0af63672062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164647 Malicious code in rino-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e936d6c76641f19277ffdef57832d1f80c7788995fa5545aa8d925867307117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170488 Malicious code in verify-taicui-busauna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e19377d32278ee6717bee407ed3ebdc7a49b3502f7c81aa1b3631cfd63685e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167868 Malicious code in teagood-yakuna12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9f29f66c9347648d6b17dd090b8893a446791ce9302a278be5ec29688028ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165198 Malicious code in riyanto-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98519036302126231cfa9ca95cee8396c7a2e2431bd5a9fb26bf62224f54bf4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153138 Malicious code in avminah-fagimdas-dafogafiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af590a3963d5606e24903cc9e4c1cb5fbcb8f22cbd8923a5bfc74eca95ff5ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-non-blocking-unuk-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e7113be6e992e7cadba902c6cb009590caa63d99ea689540e7367b1cc72c59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-capella-canopus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4536fcb69a0fe5307fda036394faf6d0557525327bea93c51233687e630a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-ursa-chakra-ui-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbac449ceaacee48c2d7d57b08c667006ed8e4b373377b2bb4c0797419daf09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-sagitta-meissa-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1581d6e8e2573bd00d9893152ee6e0435a1ee4944916790d0c7185b6a37babc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-got-graphql-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0e5b4a97cfce89e6a9b2a47f4c4ad3400f6d303f0c4361be1512f951a1c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-ultra-electron-builder-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0816aaa7760bcc5127fb6d61c65977c0490633b576a152b843d3edcf79c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-aether-hugo-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5114b87d35b47d073d6ed470df9f820bdb04e3a4dfb72dc3c23d035f79c27096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-callisto-hercules-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d99f24f56cb7e133b01201ecd9215855d54fc7a3fa3079ad2d1d61ff216ac59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...