MAL-2025-167462 Malicious code in teagood-nalikami60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eae227ca6f9405f2558d9be11ac3e79382c3ff0a5a40d75a75f4a807a42b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161537 Malicious code in nabuf-otmbian-iffbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f25679e684bab210ae34c64e63653b7e48f820338cc016f27b5a31d8eabcb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165518 Malicious code in sabudaaopa-muyaffig-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a496fea2c02dbaf0950e01bb413cec11a061c6e81b3a85ceca8af9f3e91a1e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151996 Malicious code in air-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e681304b3664835e8a2e56ed0cecf6bf36dfbe6b548832a9640963319b9e74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170247 Malicious code in uyifiuza-iytdut-daufana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b18d1b1fde52571de961e238736a1d539b14d29258f3acf5c22f1bd52e030b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149954 Malicious code in @mipta1/asewar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20f26bfa91ab985696f17da457731e25e408fef0cbd0184ad9a97e0458595c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160053 Malicious code in manurung-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4d63fce68959281d7e4dd8cb7ff1e4c579506adf4afc68d27bc1edce6cee5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-redis-sirius-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638c187fc63138815d26c2282ecd2223ddc5228519d789c20da754e12295f9a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-sass-loader-test-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ccab95f5e2ce85e46de051c78ad013ca2e19a9d5a01a4ee0a843f29e4cc47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-sqlite-frontend-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00438414a1d05247d07d79b8384dbb973407ca000f4e44d02b9467d274865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-toml-transport-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f398e45e8b0671ccf4006cd3c34befd3a76727ed59619a175ee0f0d23d33fb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-winston-eleventy-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3789da716c8a1be224410add54eccc97e3ad9bb5561c3a3d9326e119826c914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-forever-prompts-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-proxima-capella-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c4e4e6eafea389b8886de6367219c50aafba5925e89c98723c039c522076e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...