MAL-2025-169452 Malicious code in uafagarug-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9653e6b73518f425c6f27153e32f9bb6ee6e0b261450466c8bc22246f6270e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166246 Malicious code in sunden-diak-itarukinyuia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b421830c2c3a95d2aff12ae248b60e946cb8336699fdbcf25fe059bd62e7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169154 Malicious code in trevora-cir102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17ede89ba3a457a0e5602e7cb00cd60f7fdabfd77daffe70f7db89ce6ff9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161525 Malicious code in nabuf-otmbian-iagssfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f24031bd601e736960122aaa1038c030824b2109f83beca84319db1bb78345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152025 Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153901 Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-pegasus-ceres-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38cce7f7f73b27d1ed49505cebba1b4895214e8d3f89254d23015ae6620fd55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143735 Malicious code in iota-node-config-nconf-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-phoebe-mocha-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0c65dc66483e97c54b8468b7f9233fd0f70b6e6e03353e421697a43a22ca46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-antares-hydra-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4eed890ae6762a203cd1c723509b3f4c0d85ab699e8529f69ff62267e9489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139264 Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144044 Malicious code in juno-webpack-ceres-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489f77539ca50b4cd121834f2c9ffd7d72dc229c148b983939f45728486a3dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-levels-commitlint-config-angular-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac128b29c04901328bcb6420c6ca7c26bc5e847daa6dc52991d4dc227b7dbe23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137547 Malicious code in umi-lontong7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed11b62d302a5643770366c7d0d594a7ffb428acc23f98e84cba876eb6b72f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-dradag51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc468f99f4845f9d1eef80e5961a45ee7be749f9c512af516df86ae6b372196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135850 Malicious code in numerous_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f84508971369158b3419623b82179d16ff5c26ace09ff21e20d7db5d704670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135733 Malicious code in nana-kripik55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9a36f71564714a5e1d279bbc9570f3f7f6ddb7eb31f77e3f296235db24481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...