MAL-2025-161460 Malicious code in nabuf-otimmn-gaopoaig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbd192493ecf0a6d78d4d88b3bd6a939ecc8198d889758195297d07c89f1d0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153717 Malicious code in billa-65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f27bd64df46c8942759e41b9d3c5691752db56209deebe423c89dc05d374252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158522 Malicious code in lookingan-namakiki14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97606e6aac0d9a80913d35f55ed5d799496e0a5bfa74b705a1238a3a113af13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166405 Malicious code in sunderlan-ud-vakamnanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5164ee7b6276679fbe74c397b9d2cfce5088d4a2cd83a4a2c83265490ba6ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169370 Malicious code in tusaaya-01-wesaq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d587bbcc11413658d63e4e2b306dc005b2da0ba6ee5cdf37e5c5b1b405d2b73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152270 Malicious code in alfiansyah-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e385317c737a2e00979ba0a4ab80b7a7c13def7b6c69b2f73c4069253f2a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162266 Malicious code in nokire-akaza52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b89de1d0aa6a8f567722df55b8b8748e9f318ad56c3ad40ae29fdab17084b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154009 Malicious code in cara-rdeti-busdtr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ca6277da45c402407391b87d3be57733de420263275f783d86cfd798519bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166174 Malicious code in suharta-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abe9e1c26fca6dc6097c4f422740309e220b1d7a2e0faf822d1b7ed6575d9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143533 Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buzz-invasion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-wezen-nightmare-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6bde94dfd734a0f6ff67d51fd20994512dbc36e0a61c47643f5568a4c4fdc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-dotenv-antares-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ea11fe46221f15331cfdabd1b0fb5b2e15fdedf8e103e2aa4f98cd6ed4e4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local-registry-vega-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d6c344890d104e2d2a94b05422b2650f4a863a1a96482482518e7cd26a644d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-pegasus-rehype-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0ea20bfda57114b13227d54b4867638669a04fc1721663633af6db03bf082f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-izar-antares-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7283eed93edb3522ddc47f8858044db5d9a2fe3347e6e68b3cb0b58c2c1af5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-eclipse-await-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f426ac07a625c3570fc4090814ed7b621a2e38f39385e657350218d08d039bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-hyperion-warp-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5612903c54308e3be1b0a0e6cdff1d50c3feec5ba320d1f473057988b0c4f028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...