MAL-2025-161702 Malicious code in nabuf-otomin-nosafyahuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ccccbdd94c37da50e2b0b59da9a90118c68b1336212252d4a7c6eeab47b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ota-uauafdfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c39dc4e206f8c760992513e318679f0cecf09e38a6c498bf71a3942107ade9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156421 Malicious code in inal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42203713c9f41e61af64861b64ead384c5b8bf8873aecd3380c42f7ababfa39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154958 Malicious code in fadila-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea623ed545c093b8150c27db76cae3b521aff5c84e1770a80a0e20e710c52af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166885 Malicious code in teagood-lokika22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36d391ab3d224676c71fe32446761afe8f7123ceecdde563827dcf18938ac156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151045 Malicious code in @miptaa02/xfhd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a844c799d99ae90771c5a70c6cd2aacf9da9da681e150ec7390a7fd9ac372f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156989 Malicious code in jeep-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555713a7473a8e49051bbf9c5c790009101ea3d8fd8769f9b1576190ba9abe05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148772 Malicious code in transform-publish-sedna-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a03fc8338b4b798f1a5808c0388729affd3e1aaf3ffed404918845befbbdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-dotenv-safe-backend-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6116a38ab2e392b9841b501586a3f93c8ecb5457593cd69dd4d601275c119002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-carpo-webdriver-mocha-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e76adbe54ed0e722d8d3f209b3befd182623d2d08f49aaebfd39cfb56e2a177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-wolf-update-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31b0a4062c0783f6ddaa777bca86b4ee5d265da61c10b5f0a7b950f7bb3cdd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-yaml-testcafe-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dda42b4b0a944d0a92c8e190fcaa32a8da8e62b2df0d5a65453f866118b2c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-despina-galaxy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20baeb4de7139e23de09686c30c274bbcbbd52b6a4b6ceec47ce9c6ac321597c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140543 Malicious code in centaurus-enif-registry-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6ac6a6965728f64abfb8f42a82d75becc9f9347d7f4a9e8279711d36bb478a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145160 Malicious code in mongoose-module-elektra-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a0129e705995946096cc1b09d89db140a9664dde18adae9da16c0059a0004d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141789 Malicious code in draco-auth-resolvers-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01a1e333d58856b3ce23766018ec3198d0aa4fc6404f150f0c457c256b1d104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147762 Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-sego89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7a5d5bc61a855c22339aae320cf5a0cc588caae3f7c9b4c071c4fd0dece3c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kentang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4955a999fd59d377f1d6e817d7b17d8f43e50f81afa74f396e2d41bcd6a0b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136649 Malicious code in rifqi-martabak13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac350023fee160688a57cc3fc8546b6e5b451fdf2d58aa379fd7cb773b8f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...