MAL-2025-155638 Malicious code in hafiz-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa2b4c012e616ef6fda720aa266b963340bcc9120e65dfdac75ca6583f2184d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156699 Malicious code in inufgi-gotumafa-anamfozai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c3585cb588cbd195253b23feff93e62c966b5f604cd6639494fe9102eac02e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169114 Malicious code in tob-naughty-nubliesp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e3531e625c4a46b4f0d924906fcc2d8ef5c257bb8cba2b2419e67bef21402e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151785 Malicious code in aciyuudua-idut-daina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e824e4a03cddd7101c4fef5dc44f830bedf03570c7d634264a0e062b5fcdd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166301 Malicious code in sunden-dibiak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe01055decc033765ae65de1cfb36511f79dd007d5a05a961e8812ca32375be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168302 Malicious code in tealove-darknest44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de17fd5e1ee99dd543aa4e51fec1b94723b7f26f366fde93f778716fcbb909d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159633 Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153463 Malicious code in avoanah-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f16ff0413789b46a5e494acf7394036facbf5ac93f3e715ac0f0d8c046246f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157780 Malicious code in kuinsu-lukoi-natibabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca3bc19cc13e93a2b567389feeea56921bb08db1dd37dfc96ffeb5f0db9d990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7757ae5f54f1702892f324f0e8c4d6b2d7c1f47330d9a3f96a2d17c9c792ef9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fda112b8dcc551a10c9182ec54e290d988b4cd6f34c3cb5385e47bc7041ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160976 Malicious code in munya-bopaha-munio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4034b7efe61de6e0fbbeec4ad2c7cbc82e4a73c0a861e6aa2cadfce1f2745290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156916 Malicious code in irassdhi-sds-sswe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461fd8c89de40f4e15e8b5dca7451042c176b6cef1bc99f61d002a5911f63262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158218 Malicious code in lintang-tea57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3071fd46c8ac8397018eb838f6caa2474404ac35f41886471ff4e41de7d11382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-mocha-blitz-radiant-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348baf1f1458216d94dd1f309511cfbf0fdf3a496164b285479c6cfe65ca185 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-auriga-inquirer-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316359bb885ba6987c0b0f397ef7bf1642c823b88557edd8f9928acd8596cb4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-bellatrix-lint-staged-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0378d6a689f39e6883f8a3e2443165245902c2be008f4f94d7e9c198dc7973c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-odin-server-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42515628ebe4f29f49b338b463fbf9cacf11f0c276fc1094d4db107c4c92279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-quark-geckodriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8529485bb36b06d6a5e7f1de1d6573433b873e92ec2d13dfdec664b1187575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...