MAL-2025-189991 Malicious code in tree-awk-notify-beta-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a4475634ccb865c954dd93557022a7dd70e0549691c1cc71b59d788988cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sociobiology-radiometric-relay-geochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45a0cb4544585045819b6d85c347bea35b81bd249d8c80c711911c1321c1ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187142 Malicious code in gemini-postgres-rehype-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835234f600dc962131b0c036e7163ad52a55b2eff7514f87441427dbc9a88dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181908 Malicious code in avarag-olubis-balamia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c94f34acaf3c20776dde5bdc736a436d800e0880f196b493b9ae55bd41b9cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-nurdt-esnuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b8d23a7932e96c7dbe946270864101678820d7756e0418aeeb8a18ee3c298f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165425 Malicious code in sabua-muyafig-budafauffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac05bd45a7c09124b73dd24610f99e6b0f2a7b1cc05d662134500c8d6e0eb1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151098 Malicious code in abang-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a3ba2a926350281bcfac9015ae95f6d67c9788f16ba49a0b6fd8e413bf6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mand-nofoayiaff-mutunau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134aa5f45649fb1c8f1b3babefe9c2ef7a37840b299fd60d5b8ac5e92e9a6f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miracle-dok-uikayanabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2916a67cc649c3c7180615f9669169498bb0345375c5fe9d2b5582aa6a1255d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bdd6c6aa977528d7278798336822ebd940adc4df13fb17cb3fb4e1f548cbd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158875 Malicious code in lookingan-namalaka61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae01de260297db72842aee30b3115e34d20d2ef3fc9e7f71d07e6d601b3e0a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150842 Malicious code in @miptaa02/miwasf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b052d72bdcb504a0e711b96d635c90c5e99b16f95797738856cdfa367cf99f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153813 Malicious code in bitha-19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5856109bf653de0007804054a7a79f54cc28155ff9a251783882363e40a4da4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-cors-bulma-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe1fa01ee2f04af77ce20ebd02184ddf94ed2d21d9d64f82efe3f412236a439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in playwright-pipe-jwt-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755d00753640e4a895e2f9616e2566192bce7cf934e38df290ee1c614da63837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-upgrade-graphql-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c639cd0d7b8b69e23e078c6ddede7e447c6521c2b535b4b9f8efa3d1b50e6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142074 Malicious code in envconfig-halley-despina-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48934d339f8bef386426802ada777ff1e8a39e39111d761252b18c165fc55ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135812 Malicious code in nina-martabak70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a858f4b43f5a230d7907bbee60a0939b147ff93d05a01746438994470309fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-kacang93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0529918a4c21e8bf9afa37660fe872abad49f68eaa175ac6f665211e8cab9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135744 Malicious code in nana-mieayam24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd2ff07c6ff1a79e81bbb55789bd40d475087b513f8d60eaf964f17f3276f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...