MAL-2025-166713 Malicious code in teaa-reborn16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4db9ee5a03c895f00fa850f9ac099470c99a3739ba8b096ccca335da24eeb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155693 Malicious code in hariyono-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb701e091c159aa4a1e60ae36d4be1f679bc7732f54fbaefb121bf07b3de3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-safoag0maa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b666e8209be2c52892d789f220cc28575c83a9c3c0e91455ecc2e7b2cb011b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154794 Malicious code in ewa-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d33fd3f5b37dc357d5ab69aa44a30d9026f9141c2a9ed2aca06f2b66478c45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159726 Malicious code in mansa-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5aabf040c87d26a0a5852e6793deef938fa02422340313d51541d87ec14059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156141 Malicious code in ilal-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928d78571e97b89a2fd2c6ac2853f6e735f88d62aa60a02fc7a5c5afa019b8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169812 Malicious code in uinsu-lisa-amaaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bf07d4add7903934483d4a865a7e4925b03388d4dece67d85d7a6cb75e2e2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164545 Malicious code in prayoga-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efc59d0ee0bdb45e498d56653ea9dc4275210e6a35df14745b3977ca0424399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teaa-reborn37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647449e5010eea28023eefd6194050fb3885cfe8d350d59ccc2a8b9f76ff0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-ai-ups012uszgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b590d233e675a1c73a9bc8e538e7b6674f8d39a3d7f94c36e2924b3aec56bf94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df66fd3043213adeba0e34e0256b23b46eb17daa8a42d23e4d80a00ba321b29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-aurora-cassini-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0c49d28c416f3eddadd64831714dbc8fe86b0f2e021da175e5139de59fe4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-commitlint-config-angular-eris-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbe9bd68dc8e90aac7ab0a970cb02985f0e50034642a9759c08c76a9d6d325c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-morgan-aether-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760c98b04e7959bfeddbd8736fd9449113cf66e31d4730bb3f8b6dba48e44c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-json-pino-pretty-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea561973f942ff04defd609f3fb52d9c8621f6f6b7699c398f4edb048fb22bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-jasmine-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dfb0018bc45bfd3c2860fceb53ca07e74683afecd202d9deb97e51a929500f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-markdown-loopback-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60756963268718f1cbe662239160df39fab09cb6b8c7ce2669016770b7b08ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d57f12b0aed49526cc22a4e24142b150f9198614c3bae415e2ce627c100aff41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...