MAL-2025-151913 Malicious code in aibona-mobiule-aruio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6e632fec6a2d168ef5510c92694ffe31acc1d07d194f56732974be84304e018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165955 Malicious code in siregar-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d960c87d258e85c0a39f477e9f56d5a1599109df67dcc13c1bc746f8d4c885e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149996 Malicious code in @mipta1/dsgsgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4685bca1316bf29cb2ec836a2de1fc90c372df0f7518645b54d431780942229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157417 Malicious code in kapafovgiaanggapfao-safa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20667d2f5e0efd514d3285d4ce86b985bd703b5c5c38cf474c40ae6a595227ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165418 Malicious code in sabua-muuyfafu-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a645a78b67fa4876006066adde83b28f17a472cd35761441ba9d595fc624ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167312 Malicious code in teagood-nakamala47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959d182cfc29fe9b023383637fc388b02042bd39b660c596e79dea1fd155010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164128 Malicious code in pilka-kalima-biucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad5c4994b760d21df280a0a16280a64dff45335b765eea750b666ef7a4dc603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152794 Malicious code in arif-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 935c9e4e014ee861b4881bbd15ed8b446122bd17e972497e9899f97630519750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166566 Malicious code in syahlan-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da351ba959ce2a568c7f72e68928788b6f2b1b63a81e1cc8446cbf8478f7e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150235 Malicious code in @mipta1/sfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9015dd145c0e5984e60d45838f54a03ed61750e4279cc89b91df76900c834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-blitz-gatsby-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30494edd46176223c947540db528ceecf7879aa472f791139f7645ad492e282b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144865 Malicious code in mensa-tethys-local-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2701a23daa25c07ca722a238b8a79644ea9150a243c248fffb23841bbcf42f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141779 Malicious code in dotenv-safe-transport-corvus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d833eb99411857bbedad036c317ede897b63d5919e73e692817feacf64b3549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd3a1d77cd0b196ec4a386bc4b71b8fbd27406a4eb552e4ba373f7cd79eb319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-prompts-markdown-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d97b16bc6fbf8fad667b969ac047c487cfd6780f814e3e61bb8edf2bad0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-mysql-slidev-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e761a8ece0061aaff52c1ea6943574a1866e11eae624c631c31f2147ae9ae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a60f7cc7b169f8e1232d7a749adc3157ac3942569c9f447ff02e1dc726b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...