MAL-2025-159571 Malicious code in manapf-manuta-mantaap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf5997e21542bf349796f5ae2217210a3c9f7797de96cf8c4e1accba37b1f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167066 Malicious code in teagood-lokina96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95edc211489f29062a26b57232aba01db40883aa48c3c42b802590efafa91f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163202 Malicious code in nokire-nana48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101f2aaae051bd5820defdc1edc584203aabb46b449c4b164fffce7162d2552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165884 Malicious code in shilang-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de5a4767e519280122cc5f26f36fae1a0039f6a858ecc05c9c5f81f704f3c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150811 Malicious code in @miptaa02/lzdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879e100aa5ce87081a69982ab33363f850a7499e57436b3d5d68d73c13a1165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168293 Malicious code in tealove-darknest36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfd5199e48cc6edad6b04e699e386731e5c1bbe65a5b646b25b1859f5040f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167801 Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166087 Malicious code in slamet-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dec3d41fb514ac6ea8a9ac3123d65caad1b27d4f23658766d9c6430e4ef148b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151431 Malicious code in abina-mibiian-upamumia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfde9531458c2c2f865acbd3a7558e02c4f903cb7d6fc3cf74956c03debc80bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-optimize-css-assets-webpack-plugin-leda-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5f4f0a1427e61d0122916e6836552a05180e8e2081f271cac87516f12674bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in schema-websockets-loglevel-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88a4b65dbf37e6fdf0adfcd0161512614e0b1263de412f1f00033811b25e34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-superagent-flare-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a886edf55cd3ecac891714f168adcbb1205bb29b1f61d2485b8f9e54e4e18694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-reveal-md-release-it-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b3960dd4276a39520861ef7ef84f0fa31a0dce6325ccb151b2c369f820713b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139976 Malicious code in betelgeuse-enceladus-comet-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a864a3071455032bdb36223a7ab762490b721fd9357cd81fd5c6132fffefe436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143851 Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146731 Malicious code in proxima-protractor-mira-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05006d9d7135e2d50bc05fbcb93a478556d9f31bc654760d8bbe915920ba941f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142324 Malicious code in event-sedna-elektra-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aaf62dc662a6d8b1068d1c49bd2b9ec972d870646a3b2987a8882ceac957b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144325 Malicious code in less-loader-phoebe-scripts-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0453a8015b61b94e10fc0eae56409daed68846374d696e999e769cf556719508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...