MAL-2025-169025 Malicious code in tehah-nadas-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c8b1dcc6c24b8c421122e211dc5753fe415388b8b4dbf7693d2f5580219a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163271 Malicious code in nokire-nanali2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28adb2045ab3c09e58ed598d5958b27086144b09604caef6b65db307b5e3c7eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163399 Malicious code in nokire-sekiya12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3556d3480edad0653a8aba7acaa799ce63717fa918b62fee8697140b36eff49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164784 Malicious code in rinto-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9d135a0a2eb155f4737240da3a0877fe177ec32d41cda8ec5e4873ce968b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161272 Malicious code in nabila-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bcbe3f7eef5fe1fff079af0693eb58fa16b2501032a9187a4342a424aefc41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160351 Malicious code in messi-tuasd-usidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8a774f388b908c0b4b8daea3f62568195fc6db104c4fe50e3e8db525b3bd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161923 Malicious code in nasrul-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ea35b5c01e6117b3230f3dcbda5935563e93e5d1663e4b23548cb563711073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157924 Malicious code in kuroichi12-men-spell (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0166a61111ac03a813b039ee38cee5b8488021fc25a68e33ddd71daf70d473e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156924 Malicious code in ita-10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1c45c7e52f9fc21e425c48e36be40756d7dd6320e8ecbe5655010f114046d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-metalsmith-hermes-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd93e95ea1a4a643c5056c08bcede32284315366dcdf316f1b9da9df3b55c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-babel-juno-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efdead4ed42f6f74b60a3017dd381e0f65833d1f1c15b4575aafa8193a99305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-vuetify-pulsar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-meissa-zephyr-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184ecdeaa3917c9291a5b535a0b3fc11bc061913eb43b8f6a9163e3a070e4faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-deneb-markdownlint-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93b7930e02ad6837f30249a13d5e8d223ae7bce1c99c7df9c99223d8c22ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-nestjs-juno-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f7590f0ff3753b613157316d13bfbe14edecb65e1df69e658f416e56c691cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-stream-chai-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a963320fc9701dd9f33123eca2220399517e38a891994d0bbc0ab226aabcf31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-jsonp-octans-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9cd63d924544f73e5e2bbc1774277ccf7945d6e8a5f3117ce855a7d85bebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...