MAL-2025-187384 Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olioms-nolibmayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0da29a8a1075448274f5ea90caccfeb5adbf1f1c16b107916c52bad2300de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-iwetob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 212a48f0ba0d1f4699ebdb517f45ef598f35e9987232b890a702802c931873bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179451 Malicious code in aiboloa-milomipe-aai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd30cb49debd627aae49ca3dcc10e9fd855f2dbbb73cd4e79b19110f6c9bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180079 Malicious code in teate-thy-py-mami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9b0bf6fab350eb5f06aa1862d38e79857180193e4abd22b8049b91df3e8397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179887 Malicious code in lookingan-jeje17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b651ef20912356369d91b7529697786ce2f7006fbc9ed4fbb7c72cf8abd34294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thambi-yunik-musgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a531bc547de4839d883ae4e5da08ea69907f25d86eb88f8c4fa7ea7c39a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172839 Malicious code in anak-jalanan-mdn29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c4c6cadfc42922fba40f819eb2ad5ee38de10b62eb333bd8c70d9759e5e43a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176408 Malicious code in nokire-nakao18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e450984e21585d4a10c35c18230c4dde3a1129f1c25d8e8a6f2df273adf1c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuig-gibafgita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53289ba2762c97469eade866df447fee2d8175265a46155594fcf2e29bd654b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176368 Malicious code in nokire-kushina45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a870f9397df85c40bd512bfb3b22eb4e45f4aba42a1564db2af01ea40f5a1a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safiag-afucuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3815ecba7337b59e0d2ef42db42a88531617a7e4406045ea984ef261cae05ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd9d1e0265cb119e2ac42ce065ff974863d35b84fdb1d766a6660468b2a6ed4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed41d2f418ac1c193ef3fc63ef88125b961d55603e8796abc897666b6426e931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-murif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7babedcc10c15b1e3306c787f0a560de1172bb5f0b83510184a23ae9bc1898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvino-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97239d53b7085e8f75790a43f3003c002e0b999e0ab9960c86a3333a7182a29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160881 Malicious code in munir-butya-mzisun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fec6f55125f26c92bfb8481d4efb2607916eaf452accba3f781475a29f3719a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150141 Malicious code in @mipta1/mikas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd9731ecbf09392f434ca9a57efae9b07bd6704746b58dfbc2987d47e4d585d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151328 Malicious code in abih-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 709a3276b86ec7c781427dfad43c1eef89eafed335aa8366ecda3cf336db5015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...