MAL-2025-154651 Malicious code in digo-kamoi-ailasaloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519d32dbdf7c153a8b2fe001ee366672f8ee476ed07fb612a417984fdde04660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157804 Malicious code in kuinsu-uiu-vilkukmbimi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a2aa62978c3f4f0f5e80c6e55f5d25d69028e8917917e856e78f1e9ad7334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165335 Malicious code in sabua-muhay-nyaiauafamatua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfa041fa7af8333e418add2f62d99f4fd211ff5fd9a9e8d441a5d367240b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153408 Malicious code in avminh-afgais-fodafahog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0b630b45155dd3919aa0bda140d6233137a4afd6b181a8f4e874613dd5b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153994 Malicious code in butrui-muiko-muyiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58655330220bdbf495c51b1c28efcad450cafb19f8a9cf24d407baa772c06aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154443 Malicious code in diago-kuli-luai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 203b9ee7e82273d67a68bbc2cd33a8e2cc6825f69f9feee62469c9ed4ed00b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160681 Malicious code in modirai-igno-jimg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727ea716c6db03d2302ae2bce40fab835b2a24ac80e1a099ce6bfdf58612453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152572 Malicious code in alvito-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db63b4807ad47d651bccf2aef8f5210692aa61a1ddb428b857966383e2f57c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157565 Malicious code in kentung-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e092b21ee79350d4a895f6cbb11b7c86d2045ea8bdddc213840c006583007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154639 Malicious code in digo-kaimoi-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4daf305842103b869a97565fe7e34103437580e9d1bf86a7ed937a8cea9aed4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158008 Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-zenobia-hugo-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a9c0bbfdb2f4db105e962a12099bc5ed6eacdad8927eaeb93adf91598749009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-xml-config-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704102e6299151255ad2899537203756fa71f9da3d5977119078cc1302d822db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-neptune-celeste-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-perseus-hugo-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cec9ecfdfb8a0c2c57e573bfa90f86c4ed7013b554937e53b33494174a0e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-async-readable-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c33f05d6aa52a43157130c15b3cb8b2935e68f7399cff7af2477785e2453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-ignite-ganymede-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14437d0aefae1e385cdcb8120bc09283f513bed896c77b0dbe800c278ed0f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...