MAL-2025-155413 Malicious code in guras-nitroac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5532b973a3984d8fc589677dfb23fcb59c2a34182a491f9a604c4e7202c48654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169276 Malicious code in trevora-cir78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b4cdcc88f0b4ed557046d766208542ccccff4182879bd37a011846c7e45ba0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a261826369f9642044996888220ae2d7179445a5ccfd43757b65d99ee4d4b21b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168678 Malicious code in tealove-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 274c07fd9e12fd1e06849fe5a20f93753cd1e3e3ec3077b2f08e48eb2f398e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162603 Malicious code in nokire-kilua17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db4ea2fd04e60bffd2385818ff307c777dd5767a34b0be071538a3ab9769adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155424 Malicious code in guras-nutra-dagads (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3f6e3cc04241d81725379a8a3baa07448404d2a91a8e90f4eb98a65c5ae5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170001 Malicious code in uinsu-loti-babinakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e960807fea277da8f6bcf8231202e3321cc1c004bb345d6a55cba426b7b91bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-resolvers-jwt-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175874bc0b58a6c800289edc50a2a6c585a7146bf9f39355407804118a5dbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146060 Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0855a6cdfae8e1670a3485cc01494e3bbcf29db65d753f2584e2bb3c06e422b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reveal-md-karma-rocket-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0526c1876e6ca917c406bd85bd5f010372f899172a5af0441719f3554760a9dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sate48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ec82f1e35860705273d5fb6856c01cc1848d9b8ab7b51edefab5bd072d8c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-soto46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eaae0480c4c18888aebe98ffc66639e93bfc6096856e688450980834758ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klanting4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f5dd006d8508094afb5e4fa2c48b819ef88fcd427405511fab3855508089fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8ae0443d03458b857f956c00c7774e3b64eeaafd58fafa8723acd0b2e6bff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-soto12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496025aa6b380115dafc821543e27c6f14a303ba0997e10251eb059f298b75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137808 Malicious code in vina-donat86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98191b60f66179ba449123b0667a65639484721a01a096c0842754e8fd4e9e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134066 Malicious code in hanafi-klanting77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a535e0e3cff2f1797935213d1baea8904bd7347526c6e18003284302ed3806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-gembus11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891da97aacb09e895639afc1efb0cc7ddbc6eb901a8310f7e28671b3f8ea9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...