MAL-2025-158465 Malicious code in lookingan-nalako54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df94e70c2ce62a67ec88cbbd2b3fe28b851fb027a7539447b946312fded4652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154207 Malicious code in dajouka-tafd-tazc12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcddb14420d6064a229a4e831e8cb1c1e989d2064508fab4760606447f81d5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162322 Malicious code in nokire-arhani12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e545a2d35f69cdc2d04d0a8dae1c2d7eb4096bc0af1e34d022dd48f026ff4ecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163768 Malicious code in nudela-gagafhf-gasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b504c8ae7965e62cf715bc9da69ee96bfac7137d667dd8191d7b66b70013a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155157 Malicious code in fitra-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7524bd7ec2804a29f31ce610def80232e46742adf2900397a9199d62844de90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164907 Malicious code in rita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b856c3bfa71c55d1bfec25ea65eb03b786082a1ce05de382e9104dd15cf4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170562 Malicious code in wulan-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454d3d0d6d5f842d4c82e6795470f4c212f8b5d09b75d5590f7b442d8a251711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158369 Malicious code in lookingan-nakomi12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4df6d7aed189ecc1433efdaed3343dcb5068940b77063180dfc84461acbd4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150289 Malicious code in @mipta1/tupalsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acd4f55188bae00f8dbe8b6998fabf99a223789848a5d8d1244501a470ceceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162785 Malicious code in nokire-lokcek31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe654f7863b260d7b2fd03526f34e58ba42907104c36c6f3e054a48ba9431e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151033 Malicious code in @miptaa02/witaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27f8865ce8b5753e086c4247df4436d40d248b0ff7417cbc893a29095622987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157567 Malicious code in kentung-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247a8f0dd1ab5ff93d9874a395becce1b1d615798acd7fd0e8ea3d80f86351bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161036 Malicious code in musik-daitv-bdot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e904d277be4502c63c9a1caaf71967dff00d7f2a92cb38593cff780c8604d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145299 Malicious code in natural-indigo-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f37c805f6dd061de76399d9b52952b76e3b19b28a3fe2cad5acb0416bf9ae9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-relay-chromedriver-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096e192a224e6245da34ac9aaabd4b13fbd2de99af1246befa43a62dfdb33cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-npm-chai-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf16bec19825fcb8796255ce3e4faa961efe40d86c0ee3f1bb66bf1526ccb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-spica-halley-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161b803565d9a0152ff60b29160803c2711840c6794f148fa262660e872d602c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...