MAL-2025-156547 Malicious code in intan-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5c1fdca1f69275882838fabd2dc40544840b1d52ed394042ecddc6537db707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152758 Malicious code in arif-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155f7729515dd3fa05741c59fd37b75b19ffc6f93f1ebc41073f0c38530e21e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159280 Malicious code in man-nonatai-ag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bee43f52eaa9bd9d46ac2cd1449fd903d1117e9b91f3f0dac203ea1cf2de163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163045 Malicious code in nokire-nakala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d70b7de1b1e6cc814493ca2dda62501d4ca55e08c74e401242e7f21da28e210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165436 Malicious code in sabua-muyag-dafaifuma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b3a2f52813e5a25dad73881d89368f7e5de7460f6bd4c9f9eedd81234d8d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170292 Malicious code in verify-ain-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bb33500e1600b3075c038b69635dea5a5a8565949346527ff1c934aaef8dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150875 Malicious code in @miptaa02/nyas3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005a5c5e95c96953d484a8edad65a64a02aca94c163b5a57821e473a7876d427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150485 Malicious code in @miptaa02/aghgt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71811fff52c56a4cdbb527691784069bf48fc2b368fe2a58c533268f86d85a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163325 Malicious code in nokire-rara37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55da5ffa5249f67f35bbf9d4ccf67ebc0bbd14bae3197994780de15161d71320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-ini-neptune-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d671f82c7f19574d9b1990a7e60709d6c330a2fab980614aef8bdece9f0d74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-axios-kronos-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2413779045c418af087351212834783d69a8389228185a86a1f61636e99c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-html-webpack-plugin-galaxy-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b512e14d7ba52bb6f4062cd1eba6f1ea5d219bbff74f130db596d0b21f62e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-unuk-fornax-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873c6d5647614d7f40eea38f0fe82b134d0919e794148e573a07e750253968f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-nestjs-orbit-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4846b16e10fa6cb6232bbb3111de62fd9b9062e8b834653bb3ff95361135b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b8b5a0c253c8e58cb6b450ec34b1b4da65da1afaadca90b314f6ee4c26df54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-barnard-passport-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5193513bff47da06612d54ccf10245ba69adfc4bf3fcf440daa9eff11a361a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-upgrade-library-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b7436d1c19bd4ada5702cde9f3b4b860ec5e5c962dc062ad80ccd76e1a57e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...