MAL-2025-157782 Malicious code in kuinsu-lukoi-natibambi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c48540a742dc204192fc952cb64f7a766c14fe2b23363c940594788f82808e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150671 Malicious code in @miptaa02/fshg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ef14016babb38ae9b908bd128172debee2a2607cc864e2f0c58e2ce55019b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169102 Malicious code in tehnah-muiao-musrika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc100bae9a2cf86f28614bc109161ded160cb2d0d22e9242aaf316e89fc20c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168601 Malicious code in tealove-okta24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b1817122b987bbc1dc11a30c3e611b4a1a1e7c5a4e26f98d59bff713e96e79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159190 Malicious code in makan-aigoa-ifuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 600aee5ea2ebe0d4e83e68179f6d45632834954686fde6f94fd4aadd0a2a0cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150557 Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169956 Malicious code in uinsu-lot-babiam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10e398bf8ed1b57ea886aa3430f536ff13c0780295a3d5118b216dcf320f24c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169840 Malicious code in uinsu-list-patuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6af4967193f23b17a8b53bc2398577729c61975e7962fc0272f7a52b334054e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167678 Malicious code in teagood-namakai25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a08b4a24b9ffde8aa6e60beebc52ee4a2c36cc930be6d82a5b5eab83eb5beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163690 Malicious code in nudalea-ofofiari-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c102ebd82fbb48675de94a56b993d94327841c9af5fe0979592a803752becb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154141 Malicious code in dajouka-d-rlac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5cba4bea4554a4914925e047446bb99538e80eed4a16d60b2a27b9b7684aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150256 Malicious code in @mipta1/ssdadsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a04b4c0af0cdcc8c6f3bc6653e8237830589a72a6db181dfa41a4503705eced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153880 Malicious code in bitha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3f124fc5d45699f8c17e05ce23a37b01f47864ecd931fcccb2cf68fd28343c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-sync-koa-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 532009f657580cbf19bdbec5522f5677ade66238901cab4f4b3a95a524b4dd7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-celeste-jupiter-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c205fa2d6d2d6c34d73678744fd7def89ad1b39c74fa0b3b2b31c6ac339b42e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-eslint-plugin-zenobia-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfab6b0fb87953abbe4e024121bba676664db6493f779c6cd06e152a3238389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-npm-json-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 940f316bfe7f76b339bf77bd6623e5b20440bc8d2590a90996d4892bcd221a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-lacerta-axios-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff96bb432e59f1814f6243a71d0cfdb66f94102ef9409c18ddc27145e2d95e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-mongoose-antares-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24a06760a140827738726718696e4b03089d7bb0d21fc4e206ac055c8040c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...