MAL-2025-154550 Malicious code in dian-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f185844bac4fc72240f2e40baab4e1e3526a486d39aac54384ef073cf4923187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155850 Malicious code in iba-otau-umita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cb42e1ac83cbf30fbeef50157801add08fe8117c7e3ef4deb042b8a8862060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149919 Malicious code in @mipta1/aizsax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62253c1037363e9e0cb3627882b527fdcfd09824f034e7956c51ca4bbc000ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162857 Malicious code in nokire-lokcek98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4551e9dfcda4126233784498454f21025dc9bcf9673ad39f53794a9741032450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160543 Malicious code in miracle-dokloi-ikaluasak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f8bdfb5170b06958867a9703ee587cdf793bb7c9ac140efd7908a85c01976b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168108 Malicious code in tealove-aruma50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f891e31a751bd959509f8d3c473449da49933be40252ac3e70d3772a77820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169042 Malicious code in tehah-nutfday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b9dc09ea0e54f0527934ef65d1b5d2b8aa1634ca52948983a365dfb2ceb8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158583 Malicious code in lookingan-namakiki7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34903a2f91b4d75b3c4553b80750c937acc561b119c14a4666534de173ae8a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152025 Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42e93e8193104d6e6c85723b7c20c0e914e4b65581e4db271fba22cd497d993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151961 Malicious code in aibopuna-mobile-araoionbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04e0efadf40e9cca0bfa4044c91f626b7293b34e20a68887570be0e3f223ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157214 Malicious code in jurss-zas-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2ad4b4532e8209c5dd66b3e61fe262662f87c83e11cc1df266553c001ed35c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166452 Malicious code in sunderlan-uyilud-vamuikusuabavasiknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16def37420421af35dbcca7777dfbbdb92692817d4a9826eb510d4fdc87ec89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163952 Malicious code in pajero-cir5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521ab429e374acc7551f365e1a4550aa89fddae6f599e0f3680176b15b05dea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154504 Malicious code in diago-kulp-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83615afe0940f9a74512123d12b3cf404c93228b352379d15990fe2275ba3295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164955 Malicious code in rita-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec678701eb69cbffaa908965828783380cfeca935d3381ee3dfb0982771f5ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-europa-schema-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e0ac5335d8a14ceaa0793d3510ab30bee813f977061c362f79ae7b989ccd60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-umbra-pavo-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e788159d5cdde745fac63f602d0b042f254755399403148b9b0a294251a3b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...