MAL-2025-157352 Malicious code in kamasada-nutai-kd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a9cc780f64e03433c4b76c2dec895fa4aa43080ffefa1bca9f1b2715006a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155938 Malicious code in ican-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b7f0c39d022c534e82100ce1c0e6d232b14f3c85e95fe820f126187f5e9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164308 Malicious code in pitra-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3a9159ec854555408a31f4ffccbb512542c9c2a5bcd274f7f8e6861e9b16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157987 Malicious code in lala-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bc1145b9728dca14e0972e80a764a1e842ef25c58d5c16f8e9ee6b51567f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65973b688d978e575682715f377791d748a247fed666e26f22c029a46f1a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208590022bbf2fa94fb3540beb324113b363ad73b119cf4278adcad0134bf9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in salabunli-nalibuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42235920174e176b2cf675535673c0a4631ba0e113455ad8aad8bf4a36a08e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161493 Malicious code in nabuf-otin-afofgoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a7e6572145b3db1e02f0a5a944abdeb7d897521b3f135457a5ca6f3ef4ac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_dragon_green-32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b51fb18bf8430096563d6f2aa932669cb667a1d81503b210fa97f967a97e3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-corvus-bunyan-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe5e35c4ae9f8c181512f92e13b544405cdeba2a3e82a7feec814e7daa456142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-blitz-mutation-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f55a3d1837c6187591f05ff77aecde65c5efc3ddac721b99369b3e052d02a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-oauth-ariel-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1475c669a38ca0f0cebf7c8a172f9d05e4b1b9b909012c8a62416ebae573e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-nightwatch-commitizen-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5ba7ef101351f596629e0364d0b2222171328d574d9ce623ad8780380fb406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-cluster-duplex-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf68f6b5a3c1515ddb9baf8daf27c3cab617523afea0af8495b163e358be257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c8f5ff036967a5e3b226fc20d99ae1fecf14ea93e18b4e9863c82e5c82e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in norma-fusion-corvus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-umbriel-jovian-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d06f26e3082cb1c1ae58325b21f22029f52104bff9713f2a6c644765e77df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...