MAL-2025-162232 Malicious code in nokire-akaza20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7fb32604ae17bc49f3c5a1e7da3b1d0c9c942cdec45af4edb5c764769bdbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159234 Malicious code in makan-amoba-iufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454ccb4a0935b1eff19235ba0675a7c4831d6121c104bc632277b05f5cf762e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161356 Malicious code in nabuf-oguof-dusagomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0560fa902387ec0abe08dfb200216f80fe27360ee2cd8b0caedac937b87f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165483 Malicious code in sabua-muyaig-dafim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b492e33c2fd334d69eb9a969df10e11ca839a782f6d6f60b35d92b043c3950ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158747 Malicious code in lookingan-namala36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d98a59181fee54c076409bf37237347ee3a9a7a8b4ed1f8e7afd3fc7f0df1b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162302 Malicious code in nokire-akaza85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7041ac33e22e92139fd74ffbf4864af845e36dd8e8b074a3e7d2720642a48f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nuyait-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7d304e908d95352c4bd02a3710de24cd9568ec963be4fe6f36ba12b43425f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163994 Malicious code in parwo-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b08b891c883dbcc34c13bbb610ba08b71ae4a5468e17ed6b9422128b2a6401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-meissa-non-blocking-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1ffa2d0feb9939952cae2a8669809201b36d19cac0a1eb3a886e820fa1ff13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa2058169f40e2d8da83d235c589c131dee6270a5bd1a819b0edd9873ab06714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-meissa-meissa-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862badc46bc71b54f5183f457e3a9bddd4d70e64ce646c35a0452fa625d03eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eee1ab89dd01a3adcd9ec2406476a79aeb502c22ae7e6c8fd4fe9d4124d2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-gravity-npm-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb588742ab06ea36ce34b3af12e873ced45d6cb1c8efed846255ae9d75663b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-celeste-antd-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4cef15b804d34241feea86545e5b71b9cb1ccf014f30da9512e79a4b156da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-reveal-md-xml-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062776b53bb3877cbe015a14b0db5d1ec251ea399b6436a8d9fff98c0df7eade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-xerxes-event-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db070374083eddb2daddb8c997cff503dade123452489a5471fccd7524dc5dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...