MAL-2025-189120 Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188596 Malicious code in pegasus-kinetic-betelgeuse-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1eeb701dbb42b94c86f002ac002aff1581d8e3f416669abce192f22f0f377d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183215 Malicious code in kisut-dfg-dufainban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d39a215037ba9be96e617b4b7971930b8e617829cfd07e0db9c318443ff4002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181400 Malicious code in baso42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcab899be034032f904d16ba7959e075f6c8239a39ce1ea85004fbe63d94877a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-narot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62622847878a5b7687d01d1c183021a7ac81e490644c020a41c6791cbed41e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175329 Malicious code in kapvino-sofgdi-uafaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d907d5cd10e4ca3e1cc8b1460e7f78b12a7f02c77245aa3a9b795d2b5dab5122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176264 Malicious code in namacida-nuta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95215b0c8393bc4e9eed7d28309b099276391bd2465f27f426bff01a95b785d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58a6b7535e78002ba2b791033ff294dd6d120d115d7a36ce7a2b40603d3c489c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd579852b78b92aaa257610a0f663f8b810150c216c11a5cec153878185d16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mans-manapa-nutayi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eb4b3fadca584a08f0ff17f992573681b6c43445cdde1f66a8b7a03c385ca7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b20be01076828ebff2cc9fa513b6b1927d9430ebe0663592ef0f07d0607f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-loti-nalasaublui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9afb64998d89fafbec7f3f31f401fcf208ec62f5e7c4226daff28da85e9c1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152686 Malicious code in angin-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ea496485bae15508e0d8dd27463105bdcc1cdd854c015239de98e5c1def458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170032 Malicious code in uinsu-loti-nalasui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3474ae4c0c82589fca1bb5e2f0213db0ea43731149582d0bc03a831cd698bf54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-eleventy-hexo-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87b6786994febfb1afc398841f0dd4df876fad2856e69dcdc93eb4bd810a16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-protractor-nebula-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9408abe13d23077284ee2775377bab10375093115e0c5e9a2cc15760187cd65d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146132 Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8ffa5a0a2483040dc326a5955aef7ef99f3a3863e61f50c2ae5b4f40e8491b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138969 Malicious code in reduced-gray-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9d753bb45b96b642110c54a028a0db2a9d183fcb3f140c0f8771ab3e61752f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133503 Malicious code in fitri-gepuk34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c318373db7c9bdbf60f567eb1967a33cfc3d1152b3d8d7cdcd4e05291b7511cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...