MAL-2025-159420 Malicious code in manadsi-sfada-madavta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0405cc3ba09d7b81e7171d53302f38d681082b32f3ef2b2d834db5d7ed749b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161365 Malicious code in nabuf-oguuof-duafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e0e786274dc88d2707c59b9b4c5b3da8a02f13631b2010f1b518bbf8ef60a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168269 Malicious code in tealove-darknest14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808d9a29c6664429644a49526406f369580f5dcfd80b86e9412a2cd5a666ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155160 Malicious code in fitra-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48afe167ef14aba83d28a640455fac13a47fb07ed9c79e1f72e88b77bb2c1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158045 Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169618 Malicious code in uarug-mitauifahai-sufeua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d712a0cfb69321367290425db743b6f82a3d0ac680bb4de4446069dc3eb26c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168797 Malicious code in tealoveness67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba106796635c5c651e40f60db7fafa353709d14d261fc19704eb3e82703c82b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168048 Malicious code in teagood-yakuza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690395ff725633637b3ba350b7fcad44dd94f0ab1a814ba83835ba2e3346764c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159972 Malicious code in manttu-rolsae-nsutfady (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82060041a3c5c89544c97834bf33f52c406fb6978dd5638b7cd515a9be01f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167756 Malicious code in teagood-namakai96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32a1508320493850e0cc6ff4d8082be9ad024a51f33a4cb065806de85a4c855b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146096 Malicious code in perseus-loopback-dotenv-parse-variables-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf8a0f3e47fb0a4d035bbab3e87f2d08c738bc482b0680f20049920a2b45498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140885 Malicious code in comet-parcel-perseus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf0ffe22d6274e2d68cbd8b7e0137a7cec73c28d054414aef976087863d26de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145375 Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145898 Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146865 Malicious code in puppeteer-slides-phenomic-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da10031c67bbfc99b3021734ab754a209615452308f5b508f54f13c7cbe23690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-middleware-build-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...