MAL-2025-153605 Malicious code in azhar-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fccae25d42ba7cda3721d22b830d474bb1b2e1fa72909971cf8c9ac26c54431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156901 Malicious code in irashi-se-1231 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6f95cca96bbb701b3cba444cb5d91493725883e05d572e42ca96b82c75900c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163442 Malicious code in nokire-sekiya51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72acace0ae2b565e86234d4296302ed0394275c5873820a8276c5b52bd3b349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158592 Malicious code in lookingan-namakiki78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0ff5e98b0fbef45f503c05e537cc2e6ab2d7d7f6e75342d22d13100095f5202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167608 Malicious code in teagood-nalikoli52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8bff0ebda66fae3e8c9d267a6d2a75415d7e6851c875fc1508b5baac5dcea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168795 Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156210 Malicious code in ilang-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264f8a5978a7ee55d9091e1b917bc0d76e71f055a618312a1555e3b0efb00c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168026 Malicious code in teagood-yakuza66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b089dd42102f18979cabe23c3e29823ed7e9955507908bcaa7f91bf6579fe68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153212 Malicious code in avminah-fagmas-fogogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f85ab00c0c95eaa805dc2578c37108d3a95def17b00f47e7dc3a455ad15fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165580 Malicious code in saku-ai-ups012uszzgxgiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79186aa65a8793620992b9d71a49ea987553eb8a50e349179748343f218d83f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154135 Malicious code in cio-cookik-raimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f758d017ade4a1c9ff5b93b423371f788b0a793ae5acd34d5bf9418fb024ddb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162213 Malicious code in nokire-abimanyu94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3436241247c7073b0f2d2948a6f09ae1f7e494856c92bd73d708a564e6fc925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-duplex-shelljs-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b69b037c38c91ef9567baf3c3f0f8beadf38d2134de526c52e6e8c6ffd77ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-eclipse-stream-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56bfd17f4628a21dc20c811e5ba66f4d7e12628ebb94eb74e9e60a272a8756a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-cypress-pyxis-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf134834ab703042e9e90d1e29e10fcfb977b6d1e8c9f5a57c151be712a71fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-transform-terser-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf293f06ba8e34141c8b54aa5f1d3b141f1df1fccaf11b464aadbdd0e4fa940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-child-process-chromedriver-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56017395a22b1feb5980e8e21e1e425f64d73852559bbecd77fbdc7e97b99099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-halley-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e9aac84c00d87bef252f6b8da01a3c132a835159f58eade53fcae5c27fe7e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-antares-bulma-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e458a5e57c3e347d6f55186093c268acadd783984d132026980a5a24a64b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...