MAL-2025-159722 Malicious code in mans-nursedse-mantxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc9d1d3ffc4f5830b63e7c248411df3ed78b56675fdfbaa1f619027fed88f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165203 Malicious code in riyanto-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243fc1833be239c088f4a83f2d6cb3aa0d08e85adfdc49e4b9906096cb7dd414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157371 Malicious code in kamasada-nutsai-kafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd010a0de80efe3f726b9c1517ba920ad8b3ff2350c7c8157100b2fde8fc627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167201 Malicious code in teagood-nakama37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d468d095af8c191be0566b35a6307b8774fecb5ecba4e015d2e530bdd876b589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155518 Malicious code in gurs-mansad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5926d5f75b802d47387012c7226e904d08f2d03428292857024094e1958525b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168104 Malicious code in tealove-aruma47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ea7cdf226c10cab15f776fd8b786e1d8741185a527d1a2810f0a9859efdfe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167610 Malicious code in teagood-nalikoli54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335eb7ee2b9fd3f2f89f6459edc2caf60f82d8491bfa95c23211d7d21329a2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156273 Malicious code in ilop-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f8e30c41cc7718e3449348d4898e4a98de50b7eb98ab2e1e74ba8b8c7317179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169094 Malicious code in tehnah-cogsfdifad-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc9263bcd394b022a8aa451d20a3a7ceda86023bf6a639e01f1fba5e95269c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154518 Malicious code in diago-kulpo-laksi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e747ca95f039cb6fb30345bd2e4c79ea90610fa14ea6e0933de3bd7158f0a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169159 Malicious code in trevora-cir107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335ce03087d074533d6389fb4b516b555e8e0bdb555442a332466946dba62589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142942 Malicious code in global-loglevel-lacerta-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140440 Malicious code in carpo-frontend-callback-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322ec4015b6527aab0c3603af097b5868aa95270eef43729041f984b436f921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146636 Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-version-standard-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590520d16eddbdf943ab99cbcabc3f81869493185964f9727b048f57817baf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-jovian-hugo-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c6f6096489737ed111c3532cb37fcda467209476821719e723cde5cead77cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-wezen-lyra-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450068822056068b604068dec0e14016de47c0253fe0686f74ea7a0f9c9adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...