MAL-2025-151314 Malicious code in abih-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7351834aafa5d21276ff2946edf26dbc8bb138b7bc6fa7c049a65fd0534a58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928f5549a14f2b1455a748fb91b175573ba88d979622e4e3dec288ff792640ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170132 Malicious code in upilka-luzi-ilaoui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a437062ba6c5c33fdf9309f659fd72dab7ebe897618dcf5fabd6ffe10261820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163792 Malicious code in nudela-ofgaf-gafgai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d8b8c41c74d7141d4c2c237e322f1b1e34eec753ac0501200553984cab3371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153974 Malicious code in bufpani-myau-nau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d5b595c92144b889280be2bba44062af9e4a4be2d42ac2d88d3666ae0ec39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166951 Malicious code in teagood-lokika82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b813430588984c2947fff87e2d2b660e1c4f746c1900c439655c2fea94c6f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astia-alo1f-danaipik179 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1b1499071a36457661350b073c96b55a5c537b47628d3e8d6506f1b51c529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155767 Malicious code in hariyono-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9868fb6906e91c05422f1ca6479bb92de1bb9ad75d8535a3bedeef4230d3800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e22fb2f636a35b7c172fb3294597c93a0e03006627fb3bb22bcce9635b0e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-postgres-dependencies-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71addd74e758be5d25bb8be52e25957c95a1b656fdc300b65271be507b432326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-private-hermes-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb0a2cdc40332b1e6809abb656db6f05e153274162f9f92a6830d8a94e085bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-wasat-octans-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd37a599738ca614b0f898d028c4734a08455a66fdabfb731354e0ffa6ecab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-ini-start-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4617475d964864836f5e94abaf991f558e3dedca1e65661637a22c5cb9e884be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-altair-dependencies-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721480bde7839f065da67a511979ff2fad4f04e3c8f683f814db27282212288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-delphinus-odin-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d12de1692a296b43888026ae5f4cf6d26cb58c03051a26680bde2d2a9829708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-indus-chai-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640f3907673006d43312fd214e58ae21c5fce51c501635b7586b270b94c1416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-bellatrix-backend-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ab935a68be6a70f7ba6e91ca1a630274d8ffea77cffed2afddc09aacf072dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...