MAL-2025-153264 Malicious code in avminasah-agfimaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82e04eca8552c274226928359d3cada58d2314599f6d7dad9afed1b4cad02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159842 Malicious code in mansila-tila-madazio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9146c7f87929ac1c455ca185f391f695d2212c03d19ea6002ef9fa88cc3020f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166752 Malicious code in teaa-reborn9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 102f7a5e6e76194861d52f18507731caa87634c00e7897e52274a83d29b76cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169247 Malicious code in trevora-cir51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9634cc9dffab094e9c48009248b4cfcbd9c904b4a8aaf4e8092d11be7c28b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155249 Malicious code in flight-da-ufua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2db8f679a974eb31caf53ca6ed9ea68d4e4fd3c572e107ea33c0d7fc10d1172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168868 Malicious code in technical-alin-tubuinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f35881ab207c204b288c91043c8e64555220e467734d590e967292596d92be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158441 Malicious code in lookingan-nalako32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96869e83e9438fd35d178d8eb5f0f51467d3ae4fcce7432a35035b4daf27021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153453 Malicious code in avminsah-afafgaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d558645db0e3caf5ee42be4421b8af34bf5f4dc2a16682c62bfaaf19298457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165635 Malicious code in saku-aimau-upuasanmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21e54cc212c9c095463fd8627ca49d6c2dfabeab030b28514319b2446f0cab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167334 Malicious code in teagood-nakamala67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edcdf9a5e7676d13788474ed9475caee935a625be87c1f357f82bf2a6483eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-andromeda-typeorm-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab4edc4143c75bde6ff4bb54d9f1c6a52b663c4e007b06ceeeaeaf6278de9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-fornax-mdx-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01371186693cd024e100ee510bb53e5d734a9461fbc86607990f005fe83045b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-gacrux-concurrently-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f902fe71cb86fc56849ea755fcc2c4cb1b0f2d2b8b5e2ba0e79f9a3113e4a17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sadr-orbit-publish-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a8270fc0017313bc154b75a1fb4da0c00fc8f3d414844927e0012cdd7741f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-foundation-less-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15839f0d43950e7017ec6478f3d5043f812bc56814c15fb3687c2a636ce3446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-hugo-link-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f100f8b5a13d11ccdf9de9d337b8202eda41ec541af1a521b3ae2e6fe73503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...