MAL-2025-159395 Malicious code in manadsi-scaddor-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c84487b98e38afba39f12b9524eb3d68a5c6728b1394a711331d999493fd7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160159 Malicious code in masako-males-nba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badd7023af3e2302abd0fca71841b2848846cd69f3bb0e467ded91d010619177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163658 Malicious code in nudalea-fofiari-ago (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15ea7808169e80528933f76306d872d1f2159990731720ad99f998df8bcd891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155191 Malicious code in fitrok-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f902f37988da365114f676235fdf18e491f5de25007c4ebcfa8118c60d4f405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af432679fabdb86b98f2f3fc97a48d1ba4581d8e560275033fddee652c30c7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-asaka12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b18f727d3a444a1db8b8760d5292ad159925c89d7dc159ec90ff8d29be258d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164822 Malicious code in rinto-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757db8779b7df46b5dee0bf597bad409f3b5423fb4993bf0b7fe46d436f7a226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0950380f549807d5b53b4c3bcffbb23484b9cc813cfe917cf3742a97021a3bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160009 Malicious code in manuk-nai-ignun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c42be7fb0a55816c00971fb77c06841ad863ae0025608b04b5ae8d12b0f5bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162966 Malicious code in nokire-nakala15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5332ff07b578d1ff7f085deab43ccb611154013f78a1cf0b545de0c9bf6fceb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-aquarius-nodejs-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f67fb71a3747d55826f4467a6d22ba0c7a48f45bd691fa8a323662c2c86b26e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-kinetic-leda-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a50e61fd0f8a954efe8419f09851f40c614971a38e052be8080419ec4775c845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-apollo-ganymede-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe44379e5b6375b7b9e7205ae5e582c5214177af83c03cc6b4596fa80f3226ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-alphard-sirius-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c805155bc8b2e40df017e26f58e664de20bad1b1e5ff36ae71477544f82c9495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142532 Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144124 Malicious code in kastra-nebula-markdown-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab07ccf257e2bc8fb5c614300e4c4e456be899800ab9971efec8702b1c11cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139768 Malicious code in avior-equinox-xanadu-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76eea4af93d35fb757d64bc6a0908d1992ec9f0e3137d15eb9846f8f33a18dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149891 Malicious code in zephyr-nightwatch-eridanus-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3696d7c4d5b4385fef4a7e6589e7493e1486988935c857bb2a6a4f54bc2e5828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140340 Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146464 Malicious code in prettier-dagda-repository-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe057c006669f901ff3deb8a2322a85cfa4150b203802604340759d1d0e7a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...