MAL-2025-159617 Malicious code in manda-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642de07dac424184be3333b4eb486fff6b8e3cb3e1cffa9af839ac710e0ab217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157611 Malicious code in keyla-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503486347f606f86ed470cb398bd754df2714fbf2011cc7bc9167cfca61c3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155455 Malicious code in guras-nutra-nuyia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5f256a4ab6cfb8fcf696d0f7e0467a5902756989262058d631190f83e6496c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156823 Malicious code in iqbal-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dadba69adb2eea0308c3aadde5ceadaa79a21a45f8e4f8fc1d5f026f12ec502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151477 Malicious code in abiuba-avimungi-agatoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7895b49400c01b2034bb65ccef3d0667d4709e5fcf53797ac9917538552083b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152877 Malicious code in aril-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40522af1fe2291d513bedcc3c0b800cbe87944eb3efb515dc8d18d6771f3c7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150652 Malicious code in @miptaa02/fisak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9827df1733cbf29b6cc424762bcc0b9d031b64dbb944d6b08df58e96427a6395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163748 Malicious code in nudela-aoaf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2375b1bb3d9faedd7c71b43ad14884503a29cdd83037c4290f2cf5d262e33ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162640 Malicious code in nokire-kilua5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a5c6f0152d4d7f26a2952987fd734f37f2599119750e4ac606a1f2e2bac8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159662 Malicious code in manila-aldfa-mafgusdfkoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73ce8407369a6ae461547b79eeeb3291fe513c745051c691c2d32594da481ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156614 Malicious code in inufgi-goa-janga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f6ad2877e7a5c4758657e1eca6ff56d480fdf6e0d6477299d57c5da8f956f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-morgan-mongodb-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784163d0e2a8265aa80028b5501e309ce377ceee5e7e44bb1fdc98e8985cfeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-electron-builder-sagitta-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 565605b8fcdb03d5352356ad7f15ffc45159ec0491f1a7de8d9824bb1a36ac6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-halley-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0948e83a9d2253da18941421faf9239c6601e7f941de17859238be90a78b748d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-package-odin-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80c72158c29c094f5a17f94d21f9bc8882f4f430bea81bbd357f33a021a4a01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-rollup-proxima-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbce01fe12dee0ad06db12fcd44184e7a2fa4e4ae51be17a138168babedebe9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-taurus-callisto-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25b9bfa4225d4ead498760ec989c55bd57640a2242e9e99afb115d92ab40d5a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-cors-forever-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60893b7b6cf5046c9260fff05427269c4b95a7191986929c3fad39f1c32ec3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...