MAL-2025-151484 Malicious code in abiuba-aviumungi-auabugati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f273fab61aa2fdf0e99f4525ca53b7341c8125158918ded74189a5aa4006263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152865 Malicious code in aril-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1bf1876229b1fb54ed171046ceefe6b8c7ba15be89e13712b6518f686076a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165535 Malicious code in sabufda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b33071a9a975c970b9729ff70d8c8882e66bdf8147fc27e82c72b80e903f1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162108 Malicious code in nokirane-asaigaka5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a83078d5c9bbd86c4199254084fc18bed078d9db1acf5a92365edcb2abb220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163429 Malicious code in nokire-sekiya4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62221a8edccb0657dca156a340cf551edb7f4caf3c6be91d94be49813cb6438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150203 Malicious code in @mipta1/saraas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fd2bd38773cebedd07ca5271dfdaa2eddeca77201cb739d188d3910c05e90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157134 Malicious code in jurss-apsa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f540e9e914c4324c6a695e7ba88b85b67bcdec64501b4e230fd8d54dbae1b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154751 Malicious code in dioalgo-klp-aksaubli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6257d4c081b63e152267ad88d1c0b84e7572ad9a42f854080306dbbddc5b1857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152953 Malicious code in astia-alabokio-maif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44193f1441e7bacdb3f9dfd37fdc09f45b9bf33dc1901c8b182ff96d5f448ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157022 Malicious code in jeep-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b575a63970308183fa8c9aab32d07b37cfb009778510cf7271e3441fdee2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158452 Malicious code in lookingan-nalako42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60622a0e64376ba428ef2d1d2a4f644aaff9eb4a0170cb24148370f694ee189a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-bellatrix-dactyl-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fcfc725bf72c153080133ef83094f7786e64163bef4ecbee61d8226ab4c70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adonis-polaris-umbriel-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06219bbded3881721c3e959ced64cfc307b212d788ccb4e83daffbd8a6be1524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-comet-markdownlint-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b444d2ce3198df02332d69232f00a086f98bd5de52a8dcbae43404a3614a3a96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142795 Malicious code in galaxy-virgo-reveal-md-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d034c71ef9a2bd303536b3a128521aaeb01ba40650ad9fff9fd2ebbb812a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-phoebe-kaus-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69783bfba45e98d6a435b4c9cb6d5b9550e9c0d504d05dfb30783ac4cd3f6787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-pino-cz-conventional-changelog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce83330e33af31a4262cebf938f3ac289ab7d0b0a54a9d7e8419c077288380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...