MAL-2025-154517 Malicious code in diago-kulpo-lakasuzmoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1008b5e8a180c9023d59545f4e8bfed9e77d175651b80d0cde781a6daab70896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163408 Malicious code in nokire-sekiya20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd42a07524186ab4fc543ff24226ae7065fd279c4577ac72ae79a7959dcee5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150632 Malicious code in @miptaa02/fglkd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60d8ccb3e1fec89b8758eaf3afc66b7f6e62b8c7005806df6f970fb3615caeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165057 Malicious code in rival-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc1d8163afcd86de6619144a3708821a2cc842841f74e497e21b91a482fc412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169869 Malicious code in uinsu-losiat-dilak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334860d7e0a538b8f9f64687c7f48051858c97031df61cc252280f9e66534cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170323 Malicious code in verify-aya-al (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe49e854047d1f9cc460fc59b51e74504c4704693d86d0cc424ac0abcc88f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165573 Malicious code in sabuvauli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e2abb7af1626fa28b89cc889444e0510971c9ee9f43deb7ed24e5c7f0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156301 Malicious code in ilop-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5861a776ede16cd93ceb93618472c7a7e1ce5f35f98ca1142b931ec95debc4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158960 Malicious code in madan-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9bb45243e284fae88991ac4509ae044386af8e5bafebf132122d45ae825aa05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156462 Malicious code in inal-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7255081b25764b73e6eefe8e2fefe2d4e857af82da2c63f386c0851bc81925b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166301 Malicious code in sunden-dibiak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe01055decc033765ae65de1cfb36511f79dd007d5a05a961e8812ca32375be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea962b43524f0de179038c7597dec087561ff7b20781b425a5a49ca84452cce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153025 Malicious code in aviah-afiaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9011ec86967ec7365a38995cbcc18feed364f0cb7720ab937e3904bf84d1cac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a39e62db6a232acfc2756137a11a78de6ded64f135cd450433460d17484beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vamukbaupalanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f596e825a9d8a7ea39890b3098f2f4a06710056d572d6b60a39b518536372d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-mysql-server-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ff79e54f23575a8eaefcecf238fe02a47095af96770878b4d382e9964a3475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...