MAL-2025-163544 Malicious code in nokire-zabuza53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26565aff183be9f8fc53a4e56140e54cff5690c48130ce70b1118ee00285316c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159035 Malicious code in mahnud-magu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e425cf15fb78a109e9818eba5a1c46ecb9c5a457708878ba7fe2105d34bf4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158466 Malicious code in lookingan-nalako55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e90a43139c6813eebe2ad6da8adb1562b12f317515738c77a217af76319f366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170476 Malicious code in verify-taic-alusakiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cc92d04200d2cddc5158faf5aa4dff8003797a7d04a300d85b55b585b36ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156799 Malicious code in iomodra-forufugai-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceb2242c8b1fa5449f53f67f9eb27125e0008b406010873cfbb0b478d7221d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158711 Malicious code in lookingan-namakita94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1f3896a574c5905fac7c88f2d4622539a51e1af107bf1906995dd79efc2da6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156969 Malicious code in ita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f89587e298a750a299e8ab7857a054db43e2761de67d703cdb15cefbe67b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168253 Malicious code in tealove-dana45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c63cc7eef88a994fe61ba39e36f53bf5bafc73b80e769d2ccffa66f0a0f564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150022 Malicious code in @mipta1/ffsusid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48aa7ea91785ccbdb53d0f39fcedc3342f0a613fbe02be3eb5c93b75360bab51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168962 Malicious code in tehah-kalian-kon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac37e48a1f9490f90bfc7ba0a70832169ce59791c38a7724467ce1af21d5db52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161659 Malicious code in nabuf-otomabin-nojgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0472cd4e62fa2d846d4ce9a2831a8fa7e284be9c12eec5127398ea074095cc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168945 Malicious code in tehah-baut-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4fe6bc83e294f34daf83030b7bb2e76c5084bdde1a77a3942c62a84b266db96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-changelog-centauri-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fc4dddb8925f9a970aa7c5687caf4439035af040dcd9f9d60675c26aaa27ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-version-spinner-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fcca631af9bd1225bc2295e4972bb17157ec73006cf5109fdfcbc42aad6da17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-yonder-global-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5c9f71ed37b602876a6f437776d9114a08afc52aab7c097268ee51bb86c541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-ganymede-charon-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86ca30bcc45566802cc10a865760b2d98563b06c250bedde4d30bb7e523d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...