MAL-2025-152883 Malicious code in aril-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da6e7348a03f45ecadab39ddbdbff14687ba962143c8221856f69d2eb265248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167546 Malicious code in teagood-nalikoli136 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c758fd48a89ab64ba3fe9a4ac8410678a5242ac32a83e1a8c40e6c18d666066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150475 Malicious code in @miptaa02/acvb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2db1a67b9bc1fadd1632316969e6d8688e2106fed3c641f92aba1e7e33f29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160407 Malicious code in miftaiky-few-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a0b4d3ed47408ad05624c71f559974b2076d74db000b810d81e5c85938a570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152038 Malicious code in air-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfa9285a9103f32549f361dffaa6064069d18adfbf53c6b412d2866f58ebd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150557 Malicious code in @miptaa02/dadfia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c00e54b29699040e7eabcf444c969e1dd6b1f9372a24350ad83163c7e7ea82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153791 Malicious code in bintang-tea41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a681a5d31ce2cbf9c9cfecd4c65b7b8c5a2efa3cd32eb2286087cee958cbe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150704 Malicious code in @miptaa02/gzaody (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106892914853e071fee0633abb1a36b24bd0d42e4b8aac9cdf1ef0ff1cf970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159558 Malicious code in manapf-manta-n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae27cfe35ce96acded3adacdabbeae9151f42680acf66d07563d5f34c285905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166510 Malicious code in syahlan-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca333eb7fa88cc9df6db7ddcfa724d37fe733ca4791e09389a66d80cf90a3b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161325 Malicious code in nabuf-ogauof-dofuafosi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9163dee36559aed87eddb47b7cfcbaf4186cb4a181dc2559270cfadd5a0979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161062 Malicious code in mussta-dfds-nitrfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a62383a84dd8f589fa98a20537b68c931e5fad569e71a23c4fc5a1b0725c4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150282 Malicious code in @mipta1/tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a172f9f51bfe5cc90dfb56ccf221f5f51f1637c30ed6d383fcfaa31d1696135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162765 Malicious code in nokire-lokcek13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176c9a648e109faeab535b4a8736ef248fcc1743435e5316519871a1d6bd0c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166580 Malicious code in syahlan-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcff5c39fdfc621e27cce56dedc299b2674d02d7083c8343db74624eb4058a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152764 Malicious code in arif-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9a059ef119eca1ab48f46e9b6b6357437ca7b94926f3aa3f1f156e1fe0b039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-eris-markdown-pdf-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8ea8733b69b5c135fbafdbc9376fa64fe9edce2f35fed5ddc73567efb19685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-antares-lyra-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b28aaea22b3b2598d3e2ac8d5c042b517287b7edf5c994b14e88eefabc0a15e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-protractor-ariel-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13fd03154d71a25bfffd817c62d2ed9b024434ce213d48112596407a8e63926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...