MAL-2025-188372 Malicious code in nuxtjs-heka-google-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc5c65fb21b2b3d1ecc525d9eef20278307f1623df27345292cda8081c3ce4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188311 Malicious code in node-config-pulsar-buffer-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e8c0022a09dadf9f316bef3237889774793b25526950d9d077e09de84fbaa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-sofgdi-gaofgfua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26bdfaae6e470e282d64c438420887ce43bbbc775fb2c466ca9510d04e0696f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ksaki-kaisoim-aolomalao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085309498e67044763fd3ca89827d12365209f6272bfa50e83371fe933fb1ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomdoui9r-manafao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2eff7ea09c966046d7d8d09267ad58d7c70cc55d7ebd33378f18e0962d7ce1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsnu-lkui-kagnuabuanmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9403608557bc9aa6ed97762c8d997741c12f5cf2f0e3f7c6a826516c7f4125d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150925 Malicious code in @miptaa02/rusem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e0d73ec9a30bbefd994379da9cea59e499532442c7e150d3b61b51cd5b1d4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151693 Malicious code in aciaiaggu-idat-doauuufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75717b3ea31fc90493215ace3a9ea8001b7bb9d5ef7c8930632af6c40385786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee744d652b7fe41e731d9643cde2eb30656c28ea058f746d4f26e2cab784dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nokire47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f6b3d59aff9aed28818573e187006ccc7657f59499fdc10b22372296f736c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ain-aiusamakuilai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bb33500e1600b3075c038b69635dea5a5a8565949346527ff1c934aaef8dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufi-gfobai-jigugmafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e471e4f7867aa9dc24e1a55c0b8e264279efb48985303ea675b4c5c5ec126552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6822c0b3130823ddb8a977ccd8d2724fe9206722f2dce6f1a23594b94a83fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162131 Malicious code in nokire-abimanyu2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9533fb2e2d59e0c76c0e27ef0c2a5a643d3634dbc47886b2777b4552d85b95c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162512 Malicious code in nokire-genji25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d08c6ecdde76da9b2f53ced8b4a9e168ac68891ed00d9acb2eb640594a20767d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163603 Malicious code in nokire-zenitsu17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe2f97b5965faa0484b191de0901025878e0e1f800a11729f460aeab9f5d20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-umbra-selenium-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd66a2a58453a45d8f98afeccd219c9311538192deed2efd4c7bd2639be23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139818 Malicious code in axios-andromeda-dione-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab59a545a758f3f8ded31ec284cb9f47a3b3ca66dc254eb9f6cdd08d4c65ccb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-meteor-nodemon-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0936c12248fcd3921a0aacc79011e7a024186908318bf5dc11c50e41e415e551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...