MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163235 Malicious code in nokire-nana78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a698deee5247cc4ab592d59d48c23abc4c1d5a4023f714cc001542ef19f51891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169319 Malicious code in trevora-kkiissa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70fe100c784d6f24b9b51cd3051d689b0ac4b611e36706959d25179fad28828a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nutafday-kob (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82369d6bbc04645650f153877cabe29ba47cb85bd7ef25f155b0c399cd09d0c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove1111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61049b204b59d1ddb3a597e9e0ba48277161b5419a1406404c6348421e4213d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153264 Malicious code in avminasah-agfimaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82e04eca8552c274226928359d3cada58d2314599f6d7dad9afed1b4cad02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150573 Malicious code in @miptaa02/dshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa14715a954cf387f3957548a922ab0b51f559f940e6d9ff8e2c5b7b86f4208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155317 Malicious code in gifa-otau-uasuagdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db4fdf8394f16b6c9c9c758fcfb9654e6fdb3db8c7f59eb72868dd37ccd86ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152458 Malicious code in alvira-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf82441e925f5d36d19f5cddbf032ce8c01c69e6eccfbad66b2972f89f361b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152038 Malicious code in air-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfa9285a9103f32549f361dffaa6064069d18adfbf53c6b412d2866f58ebd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169322 Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-kastra-public-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0360aa34680c5759781540e3bce6926c6430e3bece46867b0d8e180291181f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-rigel-corvus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80340d0570cd4df9da4c46fbe05a0e166f4adeb640cac7709f93defed837709e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-hugo-link-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f100f8b5a13d11ccdf9de9d337b8202eda41ec541af1a521b3ae2e6fe73503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-taurus-canopus-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d949045a10ffe384f75bc810051fefaa0c8329ba416cf7347aba64b4906bc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-andromeda-typeorm-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab4edc4143c75bde6ff4bb54d9f1c6a52b663c4e007b06ceeeaeaf6278de9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-winston-halley-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffb4375f00365f06b4c9ac37c81f570c287f324505bbc1a3f0f648ee87cba9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...