MAL-2025-156129 Malicious code in ilal-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b4b6a9ef2cdbc050aa335c8853a849c1c88e112f2401b21ebceaed34c23bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161626 Malicious code in nabuf-otoin-aagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1839a6cf0fafef2284249c012f3cb9b5c2554d2df916fe1a3415ea62fe2718b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167591 Malicious code in teagood-nalikoli37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70f0cec388a8189914950af60789ce1ea0cd6b29d996d52928ea0c63e3c1d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150737 Malicious code in @miptaa02/ikdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c5f14fb93b96772c2f1db29f5b2b12d4806221bb4d410d13404072d03d01c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155680 Malicious code in hariyono-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41ecec4666cad4a8322e0ff89050730e33b18cdaf02f3ea052201833cbc47569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158963 Malicious code in madan-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa212c11898534d11156942bbb6026cace9569e2be533c4a28725386c906a68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155632 Malicious code in hafiz-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ef4f79a73e8e161cf9fa7b856ad0108990a8c31d3bd5e138c4b39cefaab1b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91584b56bf216b444af64d42a38d44bbca350f8aa074c7957e4173e3bc34d03f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169372 Malicious code in tusaaya-0adds1-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b149e2ad4caf6250b7ea2c3f6e8d183d6a58675be3a2bf39be8ec96437e768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151255 Malicious code in abiba-avbai-abuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56410cee2a85b0f45c17018077185401f5c9a793044a0c5924aadcb07ed2f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161822 Malicious code in namasae-naiuaapa-mapotaip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503a49360bb16897824c97c3aff47fcc4721086b1d2f178db08267cfd519e610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutrio-nduatd-mulidao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75eba0b957466d4fe549ed6a6125a118ec87f34a5d61873f6fc26c8e6941def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-telesto-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54779bbcb4eec02fabbaa36234e8bc29bb9dcc9fb6945cc112b983d94e6650c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-vega-astro-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a9230f5afa40c2c6c97e4608598d88bb8ba4e36451cd25491a7460626e7794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-phoebe-package-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982866fd39617ee1fce0dd6dd16c6ce9c1e10f05735ce609b8f0921d02c7995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenith-neptune-puppeteer-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10a2fd2615539814c75993efda49b5c595a87b90f8e157b39f9e05971922a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-enceladus-axios-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33a062249bd440e99eeca3811d7f3872670382d064a5d70f13ec64a7bb23b0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-algol-cli-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ba74dd1ed1fa86b1e45b96f7225f5be8ef4b2a24606e0c856dada5cd3926b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...