MAL-2025-157798 Malicious code in kuinsu-lukoki-ntabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d2b51bd723391335c18f1224b13c1c878f7e2513df6bec007848dd15ba6021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151010 Malicious code in @miptaa02/weaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff0afce15f8d925e080df27a62a41d3ad03ce29931b042ab892ee64eb4fb7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165575 Malicious code in saku-ai-ups012giek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba8605bf27e9688b7f0975afabecaeab89281644b427fd1435fa2aca313e9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160108 Malicious code in manus-tavauil-maoiati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b04f0d38691a6ed6222a9e9484c5ad6649b3f58cac611a7b9e41a736bc50a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153582 Malicious code in avomainah-frauu-ofafq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3f4c27acf462e250c70a1df48a9bdb72e65ec4338b54c4f2f9bbf0f22210c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166466 Malicious code in sunderlan-uylud-vamknin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1aea3cf87f926e72ad7f960de6d4c730c23d0a2f4a5d5ede33b4a6ca612a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152434 Malicious code in alvino-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe139cf17c1b54defe2cc22b0de9f57b9dc981480ff1d5d612d15b23a4f2b66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155581 Malicious code in hafiz-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f184336f2b1036a48c26b3eb821cd3bc410aa2860bfa63f22652a03dd10961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170279 Malicious code in verify-aikun-miau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a13a7acbfdf1222621a1e0e6503c4311d382035a1e1fe451cfaf865a68be9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164319 Malicious code in pitra-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6711940bb04c5a04ea1cc783f410d9b5f32ee4d9b06e6a155858ef3a2b23fa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157918 Malicious code in kuroichi12-fghgj-dffgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa0535fe8cf693f871696669ead7a275d3051d8d868a2f358626840effa5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164577 Malicious code in putri-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4512b8c5af4e580259480f89da9da067e8bb8ca51f60a0c5467f96b65be37d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in test-eclipse-prompts-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565adc0c7206777686a96baffa9365969a46e1d2b689e8a2e2a4253039f35fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-exec-express-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbb3b8d5b4ab25056cbd1b06eba3457a1d6a463bc5d8d8387004f7ac002a5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-helmet-wezen-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143129 Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121edc4555579663ed0cdd1b890a4798334cbc15d4f177d9d961e054c2b64395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140565 Malicious code in ceres-fusion-socketio-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7105ca67c5b8aedcc54f1b0cf18f9cfd0d84ee3f95d357d759668152e07dfce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145026 Malicious code in miranda-config-odin-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a68ff1ed630d807e3bbbabbe5a34ff698f471826af4bab49a10070e6b40639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143719 Malicious code in iota-docusaurus-mdx-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beec391661dae987beab474a5c6896851afb310bcc2fb8753cf7ff547dbdc624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...