MAL-2025-166885 Malicious code in teagood-lokika22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d391ab3d224676c71fe32446761afe8f7123ceecdde563827dcf18938ac156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aya-amiluai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5917dcf098167f46194e5f74996da43952bd9b7eaa27cf406290ff6407518db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakama84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0ddc29006ad0b8358ea841d4f3740446e99ce935c24e66d81ccd57a4035b6fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tac-malasikiu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 042ff9f899b668756e2f3ecde17cc15b153a50e1f85f622bfe287483d315f9c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigugaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f3b4eea85a51a1a6ff6fda4f9fff32b712be36bc134d5e20bd85902584b6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuvauli-nalaui-lubisya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e2abb7af1626fa28b89cc889444e0510971c9ee9f43deb7ed24e5c7f0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154958 Malicious code in fadila-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea623ed545c093b8150c27db76cae3b521aff5c84e1770a80a0e20e710c52af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148772 Malicious code in transform-publish-sedna-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a03fc8338b4b798f1a5808c0388729affd3e1aaf3ffed404918845befbbdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-yaml-testcafe-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dda42b4b0a944d0a92c8e190fcaa32a8da8e62b2df0d5a65453f866118b2c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147762 Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-wolf-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31b0a4062c0783f6ddaa777bca86b4ee5d265da61c10b5f0a7b950f7bb3cdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145160 Malicious code in mongoose-module-elektra-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a0129e705995946096cc1b09d89db140a9664dde18adae9da16c0059a0004d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140543 Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141789 Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kentang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4955a999fd59d377f1d6e817d7b17d8f43e50f81afa74f396e2d41bcd6a0b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136649 Malicious code in rifqi-martabak13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac350023fee160688a57cc3fc8546b6e5b451fdf2d58aa379fd7cb773b8f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132816 Malicious code in dian-lapis24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5bc9c7a2014a19ccc0fc4f2bdecafcd74bc3a50231b9839f421bd813fe4b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...