MAL-2025-154462 Malicious code in diago-kuli-luvakaumi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ba1d7c336f11f256cfa5549e51b722affa7ca072ff6a588f4f02acd0133b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157322 Malicious code in kamasada-nusata-bujdiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283333d9408b5139bc127ba0c34e567a493d21b4f15ce49cdd281b33bae4865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164357 Malicious code in poli-akilu-lunakia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e07ca5dbce861eb7ed7e89c9a4b906687a0f7a850cb973ec910b38687946223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153446 Malicious code in avminh-afogofafafi-faug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aaec3665038b1a794a5c5320d0885467c8528f72e178e580d67cc8e1c41de24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168164 Malicious code in tealove-coki1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f2165aa2c5a3abd122d1a542037c72e81a01d02ad22aad35a47e8be75b4032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160682 Malicious code in modirai-igno-jimgugu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b760852f3d63d33ffd19d33a406d429cc3d7b516359da3b981a083a411e38f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160955 Malicious code in munisdr-nserf-sarssafd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54a52c6a5b6269f9d68b00b5ad7a6d46c8b222a361e9cb88c3221969b7fc3f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-kalimasa-nvuba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff7c323dd5d992b98dc4e592b9d4efc2fa26958e85c2b72bfecbdb0a82a48169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in docusaurus-ignite-chalk-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ac628852778f49428df04f0f333889e78112037446428392da60d03dec11e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66bb4c4f9514a26d6e113873599c5e7369b845ce22dad41407a0ef16cf60eb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-html-webpack-plugin-farout-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8601e78b8d2dfed9130bd47aa2752133e6926bb319210973f17abba74f8c4aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-oberon-private-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f3f2cb0806cf61edd320aa4c7424aed2cec173f00e9f069a575bdce405dad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-javascript-remark-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 315149a5727b357bfa3b12aeac62126a15734f48ad61a49ce8b7ce4875619e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-configstore-regulus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41feeb09f0a84aba33cef6885ce6d13ed77111fa4a690bfcfb8930d9d5d13ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-webdriver-galaxy-avior-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 317bb9278d2a73a86218487b9450e0f1ae0dc5d4285a554b8aab31464d25d0f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-enif-webpack-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ed194f599f2836a83fef2b6e825f59f54b15e81de0a8f75e18e895572a8a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-relay-soap-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-taurus-registry-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53159aea5ce380db3b88eb4598bc7c2b20a6594b39b1036b1ee6c316805d286f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...