MAL-2025-162326 Malicious code in nokire-arhani16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f0d7d2b32ffdc85aa3721d67e4cae0da11e5e79a57c714dbd21509b07ec9172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158045 Malicious code in layla-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6b1e724463960e2eae8ebd02a25b5d6b9ffa0a234d24eb7636434a05e711c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152920 Malicious code in astia-al1f-daronoka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c214d8e14fd89e62247b8ce6b14c19be06da58d73700d9a72b43c74b8df73cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168797 Malicious code in tealoveness67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba106796635c5c651e40f60db7fafa353709d14d261fc19704eb3e82703c82b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168048 Malicious code in teagood-yakuza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690395ff725633637b3ba350b7fcad44dd94f0ab1a814ba83835ba2e3346764c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155395 Malicious code in guras-kaaryo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e9205cdf3ce9731f0fcf43b8e62876d215661640406da20e14c8c8eb13b3f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162333 Malicious code in nokire-arhani22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c996dc4b75532b5663087c3b5102151c5542c6d6464b609f67f5ce2a541e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168291 Malicious code in tealove-darknest34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fbd7d6659c550215f9737424287a7b53b6b6134c164a7b9f5b60316bf61fa92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168138 Malicious code in tealove-boy31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fac7f1b760a1cf6b56d2a91c1cd0d36fb642e97d159e680ab4adc54b9fc1f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-ntai-yolaaadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d52fb194f15d939faf215f6f41096da411825d0ecd5c83e0bbdd446d88ec42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-meteor-gridsome-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0350e4e97914558d21236dc86b33cf1f8a2f17eaaf6880451967e6cb9113f292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-google-build-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e1026076b8776a5abf64629bc49bf72b89ae170bac59cbe6d152fe94085f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-element-ui-wezen-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b726f17933e589a1638016068587f34dbd8f34ca68c975c0ddfdd7d9b38d6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141804 Malicious code in duplex-browserify-magellan-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-rimraf-transport-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d320839b4d250dc51a6c8d4afcf02325f2d067157ca501e732ebea5362aa8ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-request-postcss-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34fca1fc606cf6304fd682277d3fe822752201f5db947bc62472a4202d2ddc2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-jovian-carpo-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1494de0aaf3324e5ed53cac6ef4a57cd2fc531bc8b1128185f6514d597d8a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148473 Malicious code in taurus-miranda-yonder-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522058eacf385789d7b9d2dab9db3cb50cac6b1660e926378d440f667f67abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-zenith-commitlint-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0edf0102ed5998d6e60cdb42442e4079415c2e2d1ec9e6a64a15ccf0ef1a857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145898 Malicious code in ora-style-loader-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b7adc4b81369d78be0c306888de6a7958b95cae36dee66b5bebf086605344d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...