MAL-2025-154555 Malicious code in dian-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bada65aec117c2fa20f8d736ce56390567e678c00e67bbd95b5e8f73557c3471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156601 Malicious code in inufgi-goa-jamna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d50f9ffc4f929c5937d649d9c2c5352e65958084f19c19f6c6f149bb0a8389e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161832 Malicious code in namasae-namuda-bakua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe969ccd9cb2ef8e1b40285edde2435af635c5eb3a5e6a389c951c335782d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169523 Malicious code in uaragifa-afiat-usafar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c926ab0a131146f732ddccded0adde6d2b4d6c2b16d3bc2a2ff84026d93f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159939 Malicious code in manttu-nuyati-dyaqsdrsffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9581bf5a04f4ed133f4a91c1cbeae828e0b282f31593c8ab0c126332f6dd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169672 Malicious code in ucok-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b239a07533e4ea401fa1b6021b8aebf441fc45901be06c529bb14b89483ec6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154933 Malicious code in fadila-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420af1b41ab32d6e711bd692260570b52fae6d54b71c53c0d152045db69d133f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157909 Malicious code in kupai-ukuta-jokakai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9403df0ac44289fcf3a0ee48d482d81c3a8dc15893c2b6116d5163ea18496c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168229 Malicious code in tealove-dana23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efa789ac208d35eb5233072748f2c4de31b786c00e4ec9d28ceeca5398a6750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157136 Malicious code in jurss-apszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01f9cd55c3f7548fed0699c71e5746fa1384cad109398f3267d1274148af983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145407 Malicious code in net_halibut_azure-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ccd9260aefbd483b64e742ea18c29faa0cfcca01c94a0622f4fca874d2815b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140402 Malicious code in careful_wren_blush-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5695272820a4e805fe88080377b4907d706724b525cf83d9c1c2806ce486c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140784 Malicious code in classical-blush-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4788edf05fd7a84c1d50968e29cb519dd07ef3c4707662ff8b3ca19a6d3ee6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-sync-perseus-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d54e21caa1696cf3cef247fe0d1e27b9dc0c37818e8ab73e05d4850ef300030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-unuk-helios-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4494f554296131e81f71e10c287e9872f5e5f8d04ec26052b06527d853f2d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-hyperion-hyperion-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2420ac58717c6d74276adbead23ce93969bbfeadd6e97f0845fe3f0c1fab2948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...