MAL-2025-159341 Malicious code in manadi-scidor-nasuiofp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490ba49ce8455a760dd44a39fd07cb725e8d1118a3c93a703357bc1496e0b2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159635 Malicious code in manda-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd306c1a438a6dfa5031204343e0c0e2425c8e746d539ee834bfb670c21704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159116 Malicious code in mahnud-unagau-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9be47067eeb544b014c93df2ae8d7882184a5ec46325e8a6a7b2d69a53b7d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170301 Malicious code in verify-ain-sua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9050e5948f3aa7bfc74f04c05246f5bcff48b120192eb278d1f661ad12b800a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164279 Malicious code in pitra-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428cf6217a5f74b3ddb997610505c9a0cef06ad7cc4dd2b3cfb3238ea293b929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157941 Malicious code in lala-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 209f359397c18c4e5707afa383051d17db3b420ba7e96c904479cc72363ff171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163937 Malicious code in pajero-cir1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9e368006825413b6fda3771ab4a9322fbc2db48d84e836bfe7d28e6558d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151441 Malicious code in abina-mibon-aguphupabmi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d842eac694080298240a5df69a570edad0bc75ed18a172f994a96f49a58a7ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-postgres-update-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11afb35799007a0e25cd3e23775b02f1bc4fbd2fa565e5913bfe2f55d4648555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-jabbah-nodemon-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b2182e2ead59f86384be92273d8cfde1f64d3a26d5586e5239600a73b89eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-lyra-arcturus-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f0653ba576b64db957b8616b378786fdbf0a14b176d898cbbe3bc05bb2e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-lint-webpack-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973414239625d55c246014e0aaffaf65e3adac322e0a939b9e018aebdb055f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-postgres-helios-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b00b3d16da39e85a367558e438d72233d4d67d4b9e9c2633f5b22123e510552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-despina-express-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7c54546c245026e1ddf3fc858471f2a6afa4c98b47cfbbeb35300357a35dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-rimraf-eris-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf70ed59506b87bb301e207eb1834afa3b553ef1cdcd022c7e11d77fda8abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...