Malicious code in saku-ai-upusi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 720b8ee13ca3b3c5752b7df41d6903d98ccd752cfe623087d6b711ca898d0995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451086acb775f5928b08e0a9ee72279af58f417d08d54cc939f0876a2744212c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167370 Malicious code in teagood-nalikami1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0232b97b3b8ceb50c97a5685407d13cbdab148e5b2bb0c4f4fe6a3b7a2b61462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158498 Malicious code in lookingan-nalako84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0b27289c47e663c6eab7c4685244087cf49179c3d9a052691ae2b4e20078bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156684 Malicious code in inufgi-gotmaa-anamufozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b755a928ebb671e401e76588a9c9188030f4a0dcba9975ca21e2739b8e99705a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoin-agodofagagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a05d11d2945cef126bf96c0533321c1dc05e6a7a39bd554be1b2ce172c47a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff044111c257efa45115a4e594f6b908c1fccd2db022569db4b28bf3c49bb3c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163821 Malicious code in nudela-rae-naha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a0f5136a49dbbbbebd8df3e0057e7ba94cc1ffd95e64c583e1d9d2d337cc6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165437 Malicious code in sabua-muyag-dafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3dadc737c7d47b2994593740ca17f25cd868578ad05988746a3611d091f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159928 Malicious code in manttu-muni-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f940cf79e56e3ee6a93ca26e5fa693d204cc218abcbe3fe32806eb667ade3b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169651 Malicious code in ucok-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270defcba4994b2216271f8367946838efe8d764c0c560db8c83067058134bc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168560 Malicious code in tealove-nokire31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98fd112f1d5a2a97cf53cc1cd7f7e83cac4484b35438dfc07583227419d64ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-yaml-build-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894adbcc9f4739bb639ca7e40464f004fc072698d0e1f78d208a3e9b8d3da697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139273 Malicious code in aldebaran-electron-builder-subscription-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abc784a8bf74e36e8288aef1dd04e6dec28384acd38f24ddb4017757aebd310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149898 Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...