MAL-2025-156146 Malicious code in ilal-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883f7614956eab9ee5c20d2971725287f969a853ef7bc0102b60ddca54e7a455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150652 Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152877 Malicious code in aril-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40522af1fe2291d513bedcc3c0b800cbe87944eb3efb515dc8d18d6771f3c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161410 Malicious code in nabuf-otgigaf-dofajggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617432e437415b6df8f802657fb6da9722975f4769d57fb516a62162470054cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160915 Malicious code in munir-nautyt-nub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7297873af772cc49c0cc9211f1cf585a2e1bec8e078a1e5e0f6dc9b5a7dd6070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155551 Malicious code in gurs-nurassa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef6735abec9e6783882a15403cdb49c630781de4ee938b2ab5290bd92a121d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156756 Malicious code in inufi-gobali-januabali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734a72a1aec4cdedaa0349c3d8896c720441f1c63b56a32853a2019df843215d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157229 Malicious code in jurss-zsaa-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8006fb94fb09742b16d98090fdd74f710194765beb60da725ccddf32f2b93f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162640 Malicious code in nokire-kilua5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a5c6f0152d4d7f26a2952987fd734f37f2599119750e4ac606a1f2e2bac8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157611 Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-package-odin-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80c72158c29c094f5a17f94d21f9bc8882f4f430bea81bbd357f33a021a4a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-mensa-meteor-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5f170210e0d8eb08a7942ac60c145b1e1e5c1422ede04ad794da31b30e14df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cluster-deneb-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6606800f76541e00a782f9c5c9f56d495b46fd423e3525710c8c3ad613f6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-sass-loader-morgan-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cd9cd586c41afbeb3e8333ca04a4240347ab41002bf5c1c9d9665191c9c366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-halley-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0948e83a9d2253da18941421faf9239c6601e7f941de17859238be90a78b748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...