MAL-2025-168928 Malicious code in tehaah-codfd-barasgewfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a4321fef40145f5846f6382949ee352f35ab5800fb97229ae5104a26b316b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158239 Malicious code in lintang-tea76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35610bb125713f817246fe386ad0871df1d8ab32ec327999e5243620d11e70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154108 Malicious code in cinta-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dceee370ecacdb221051478de3b830ba5599bf0de57b09de127000e1ac6b766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157136 Malicious code in jurss-apszas-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01f9cd55c3f7548fed0699c71e5746fa1384cad109398f3267d1274148af983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164239 Malicious code in piluka-kaialbu-iuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee2d506e0e4b4b01f073376ad1e142c61305885d07e3fa85da5446cf16778763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158745 Malicious code in lookingan-namala34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac4b0aec7153ef77e0a9fcaf36c3f18735f026e35ee97275743412b1548aa40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149431 Malicious code in western-amaranth-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256fcefd037c6bcf57310c55d4eee222cb6a258399e8dfed1ee8e4c5ba6a1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147934 Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148346 Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zenobia-javascript-transport-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 582ed82565cc2459fabf0fc9b1e689521a7becf110b9799fa259ced54307aa9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-galaxy-titan-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b41f87fbda362c14ed0d2ce294e7042bd6d3b72ad11ffe6d1fc90a4c990cf9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-cli-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e24b115a829d16b3956d1bc125c8001900849f9d2adfba59701f7f3a09299ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-delphinus-cypress-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e90006f91809c42a81f6b7bc4f6c1dd7f04d7890b0bdc6e8f6a7953e62370c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-rest-commitlint-config-angular-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f62624d7af56b3ad9391610058a9c8347af8babae64bee75e0cb6963cf960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-postgres-forever-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721b5af0dbe9dec968beee5e2b0a96aad969806791083ca6d0be1ea401c9c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-xml-kastra-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9c2bf1b1dde395f39bfb95800a0f14b8fd95f06ea2bbcea41cf3fddbcc839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...