MAL-2025-153523 Malicious code in avomainah-fragoias-ofatafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0505fb9ed2d5f1cecc55965d996fbbda3ea74102b239dcdfeaa6b31b324dcbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155915 Malicious code in ican-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15c61c0844475e18280f28fed55d1846c68438b9af7c0856aaa3bc0e153ae75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159631 Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166468 Malicious code in sunderlan-uylud-vamuiubaknauin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deef4566ee93db2a10596ec5e6fd1c3c1b45269a30ce413399867813627b693a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163547 Malicious code in nokire-zabuza56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f976ea8ddea1d05c69cfb2734661200585a055b3fb49d527099b04d05981475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159723 Malicious code in mans-nursedse-masanfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce918c3a265038dd31b407369dc5fd824d54568d0d1c25ddd6383b4c719bb365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159635 Malicious code in manda-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bd306c1a438a6dfa5031204343e0c0e2425c8e746d539ee834bfb670c21704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165601 Malicious code in saku-aiaku-umuaialakdaosoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7857d3cd234b75176a9c7b85dc016fd10b5289c923f4139772c6054bc32c2cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164354 Malicious code in poli-akilu-alubnina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 389bada6b296704343a1dabbe22fab3b9c33f0915e90d89b15f2c9f3adb37b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140999 Malicious code in comprehensive-silver-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541381bb28bd073e81cf15b74de3bbb8a6a48a612c12ddd4b7fe62a524767fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-prompts-wolf-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b563444307ba12730be4d4dd379b0f4ea57a6c753184d0fb9e20c6dde6e5d9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8670eb51790e74da0f18c792f45784b13105db35ced17fa5567b4d0730ee2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-metalsmith-hermes-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbd93e95ea1a4a643c5056c08bcede32284315366dcdf316f1b9da9df3b55c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-remark-jwt-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc239a2ed1afe79b7aebfbbb3f1af622f246000016a43b3cd5e61154f7b71eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-jabbah-nodemon-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b2182e2ead59f86384be92273d8cfde1f64d3a26d5586e5239600a73b89eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175791e0a2ba963a3bf01b4cedcf4e14f64712bb8230142a684a456e4a8b944d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...