MAL-2025-165518 Malicious code in sabudaaopa-muyaffig-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a496fea2c02dbaf0950e01bb413cec11a061c6e81b3a85ceca8af9f3e91a1e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156080 Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167462 Malicious code in teagood-nalikami60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43eae227ca6f9405f2558d9be11ac3e79382c3ff0a5a40d75a75f4a807a42b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157249 Malicious code in kamasada-buyasada-buyatad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea17ff2ef283f88f6b5a9053fc7f8ecc9f6e8d2a96c58d495842f178c778130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154271 Malicious code in demdadf-nufaio-adudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e724f190307e6c88313b0515f54700d01043a07a13afa398c2db03e0d90d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161309 Malicious code in nabuf-ogaf-doifo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5c97dd46f4b7172b6b8da4a233fcb019460d750c992c60a9e56512d7e69da9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153308 Malicious code in avminh-afagias-ifadaaifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93becb69935a9490d8238d28ff6a91fdadb616cc8f3ab573d91954696a12a225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157183 Malicious code in jurss-gdasa-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5496f9917ef3e90cab70b4b2a7f742915a11f0a714121d562c3346dadd4fccb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168142 Malicious code in tealove-boy35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c12dce88f504cee883d05c4de542f591dc730a90490fbcfa85a15d9783c332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158892 Malicious code in lookingan-namalaka77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc29df0c72e26e3f445ad750d88531b62401b2d0d825da38ac37a21cd8d6cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162376 Malicious code in nokire-arhani61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e82b8cba134d4d83426e35a89e5ca0d371a3f2321495ac3d6d89199c6b0b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da7b11f5d19f38aebb9b11b77829cc1f297913720313c772afe3c89584bdedd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161701 Malicious code in nabuf-otomin-nosafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89b02bfdbf18ea7fbdb72a919ee311e63454c7f41c9f9c3ad5c41800691993a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159488 Malicious code in manadsi-soroi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a8685df02f3d31048f2547898d82abad7b31aa43e583f4d02b258ec125cb1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f927c9740d12804f853b61b444c9b6f5cd79995a22dff67f921cc4bee9c7714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-soap-io-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8f6b1234992cc9122d8dc53fa5c86ab2c85ba860f34355df6f2422a225026c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-css-loader-neptune-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 471b5799bdc0500202c4414d25c7709bc32363daf02d464476cc8a8bb3518ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...