MAL-2025-156749 Malicious code in inufi-gobali-jagmruan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a6d5596a35531028ebacac042380edfe89a6cbc017d4b3dda7b1be39f4805a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169155 Malicious code in trevora-cir103 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f98a9935d9ca0b481f325507e7323d709833b740378ca586e38be26e5efc7c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156382 Malicious code in inal-poke109 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3da1a563b6d5bdb59ebf89b44a5006ad7e1c81a26569d0db08a52b60906f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161452 Malicious code in nabuf-otimmn-afofga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051597a7caa0c84dad2b37d6263d5778b6daa137c45162f4758f16e66ad9300b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153396 Malicious code in avminh-afgais-fafdfog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8366a894bf3abacb3fff7133e4502b4a5a05d3cdc8734ac170d1887b662d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165856 Malicious code in shilang-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d512dba0cde5ff3e4e0647228469558b5aaabb00bf2891423db05f97f19fb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154833 Malicious code in fadila-poke101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4861956e0ae6a6f95ca988611787db5e6210d461c09d9b33e43d1309ddf8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158497 Malicious code in lookingan-nalako83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562ca69c8987f3f856341e568677e6fc3b6d4cd6f5703e4610bb1bf2187d9598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170509 Malicious code in verify-tecical-bisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9e1b3c76c36307eb7fe45e420a4615e19c47a38709a42e5748cc2da7f1cb86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-proxima-cosmiconfig-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad310face776321398b0f37422c8df1b5a6ffe9fee76b8373b390f3511ff0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-draco-frontend-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-luna-markdownlint-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ab87dcd62e2f0e2d1a152fcb986d0c1c03a209224823858cbf463010da48b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147584 Malicious code in sagitta-cache-cressida-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6d33074d4639687ea4dc27c8f8a6f47a6cbd64b890cab5d26eea38f2de19bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145597 Malicious code in nodemon-test-cressida-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45f88a96a3af72b496234c0c4c6208f7411c56f0edceabe35a5af110a4566b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141682 Malicious code in docusaurus-winston-ultra-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c0adced646e6c70706e3732d3afd115a1f845fe2c37252c14fa68db27c94d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145868 Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913bbf04b9d69140ecb5c9b9f40687172fc561d0617dba209fe8a7a78d5f9062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140663 Malicious code in changelog-bulma-meissa-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0babacd4b2202419befcc339789b9595da99bbc780c6d678c8c4a17261fb6900 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144542 Malicious code in loopback-bootstrap-yonder-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ec91cfd298ae8192aecea899b37e4c3215d79987691a12d3092f9767b48fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-atlas-thuban-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e878b4e6fd11733f8146f15b3f2adb704edf92f18598b0e9acf12cafcb3a9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...