MAL-2025-156527 Malicious code in intan-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0b64092ef07e7dcacd6634a3ec5a25fa2ae6e6d688173b1e746a86991c98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152491 Malicious code in alvira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d912ae87e34625a51eb6dc41caa62cc667afbda7bdc528ec80a8b51481a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161287 Malicious code in nabila-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162979 Malicious code in nokire-nakala27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d763451aedf178c662f30421da7986c70201db67c0fb260b20be89a678c4908e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167147 Malicious code in teagood-manaki79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787e0d1a25e83785f749119a7525d42a0e1d775940de52fda56bbd4a6666b65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162063 Malicious code in nitaaus-nddyr-re2ff (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca36917ee06b4ed2af3056650c537e673cee758ec8bf5d6cf18a1d5b8c3d734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163820 Malicious code in nudela-ofogifaf-agai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 640686d6057e0f7cd97450c8d3d6a9ac960594b7590364d399e3fa0929ac62c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151680 Malicious code in abyila-nibi-luyipai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610db148982b6e91344488cfa451513e2cad72b9b22d7d30c6c91b9aeb9bd21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169959 Malicious code in uinsu-lot-babiunaakam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b61bfe6f031e9da204f232462fe1284e7560f60efd34d3bc9b6cd4063673212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-ursa-ganymede-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427212e66c2c920494458df1e674de9f5ab3f1041f068f2312a5a6c8e028e01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-elektra-quantum-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a00342994850ce03c837378e8eda96dd6f80397b14d78a04906aa43710f198b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-antares-bulma-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a195dc12e34bcddfd2b5e36d9a5c748024e53f940af3a3b5ec6ee8f472a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-wasat-eslint-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-carina-forever-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f91ef5dc4c00f9832c98df57115357c304787af3987b4df8eb1f049d795218 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-json-spica-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a8db87cf4707432b8ebc2ee16ad20b779dba4d003e11c5a8037b4df27fded9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-dotenv-safe-quark-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...