MAL-2025-154404 Malicious code in diago-kamuli-luauak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e8d132b415197dbf6b1824ca1328cd50f2a5c117537caa7382cbd898e49a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166551 Malicious code in syahlan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a690a6301b012302ee236db43f628f3568d5be736dfb1e04581e86a8d93f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166146 Malicious code in suharta-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1441531a0e40b0b913e992c59ee4ddf00083275d0017342221b01eaddbebfe6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165100 Malicious code in riyanto-116 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b558bed4320ab45bf2d5c4451f2ea2e823f0a3ad0f3d8999a97250bdfbe06879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167887 Malicious code in teagood-yakuna3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dee2b4221d483ed43396ce3da31e162de568262cc1ab95392705ce8dec825b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898525d264648b2f2eb9509a1197b843a91f8c927689960c4c39229e7bc52292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169879 Malicious code in uinsu-losiat-diunsaivu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1aecf0cd5d5873d5294d2256939131d9e03a603c089d0e4e5ab894e735c56b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162480 Malicious code in nokire-asaka11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e686f5546560b72fc3ce3cbf63db272f32fe061c56e8a676224ab373813e4a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156400 Malicious code in inal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2364bb0cf3345eda4d21f886f6d94f6d836f1778dc9385ecef31b7496d953a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154370 Malicious code in diago-kamli-lumiola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b8415d246938baf39c3e65a517e470665945fd271ecaf4cc0cef7831cc15a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154258 Malicious code in demaf-nuddaya-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66ea89d1d6253d9f02d9ac1d9c64d4310df70cb7d5a4128341698c8cab9c307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafiday-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28d4bad91a2611d995fa94fb4ef5ffc752af3215919bb5aad5db52c26b7cd21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otginagaf-dofajguaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a2e124f7ddd17503c3d1f53f4f04471e50bd87f832a4416616e24afa931d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159134 Malicious code in mahnud-unofoagi-gamoani (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504a758eef89932b9cea25c136022d515c9e3ca808f27cce515ffadbf2c6dabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-request-relay-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d1817134d21724214f2fe946a873bdffacb372c5d66c6abf5cb9f37ed49b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-public-uglify-js-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92633050fb8adf6a74a175f582df02a6039d7469d7d6b33ebfc02ab978a9fbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145066 Malicious code in mocha-aldebaran-sass-loader-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4e7e98e5605c713059061d8faf2bbea600f5c269f0c61c5dbfd5a723d4c601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140611 Malicious code in chakra-ui-cypress-juno-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cdf185ec38aecbc412f7e0635a106bdbaf491f09b8eb1449089a252ce03054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...