MAL-2025-163202 Malicious code in nokire-nana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101f2aaae051bd5820defdc1edc584203aabb46b449c4b164fffce7162d2552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156247 Malicious code in ilang-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2e06cf95eaf471a08a918f62607f0343d6628d7842f701adfc0945e3e212d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164578 Malicious code in putri-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed7902c9775499b9f3b5b164844ac748c1b6ce2b2567b77a7cb1a75e5bc4703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162436 Malicious code in nokire-arjuna25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afcb84a451f990171fb383523baf7f7c195fc6d25b1ace9a64d97f68d88364ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157125 Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156487 Malicious code in inal-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5793b09edeac8653710851f09a0dccfff15e94b36c583f237fb54a058aec0b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157021 Malicious code in jeep-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db87ac483ddddc5bf2e470ae49e182e48d970f292f429f178993da330c9de5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166151 Malicious code in suharta-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7eaddf5e65053807b7f9bcabc0dc35ab65d58d9581f51ed81aa67f334153ff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c1336a92cef831b978e2a49a2b462c80074ff66f86efcfab01e4a980d933cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-toml-transport-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f398e45e8b0671ccf4006cd3c34befd3a76727ed59619a175ee0f0d23d33fb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-thuban-dynamo-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-pino-quasar-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f746fb29e19796cc7ae57f5ab42bf57a701711ce4a6cdb0c6da4c876f9a77627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-websockets-loglevel-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88a4b65dbf37e6fdf0adfcd0161512614e0b1263de412f1f00033811b25e34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in framework-dactyl-exec-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e093d0cc7d469c010330f2fae3ee59791663210739ce726a1470a5457e8ad63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-cors-sadr-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0530075e6b1e45faedcc08afe86303c56c19cf2b046d0fa3f42018e2fa10b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-comet-prompts-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 504ff9d0a1876739fc8a79596b830b0a92c29b4ac7fa97d300fa5358b1419756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-backend-bootes-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d478dcde22ec2327defb9b0c58a5a62631639752144f7df308808fb78553b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...