MAL-2025-161250 Malicious code in nabila-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7141543bc7a91ae61641fa06150bc2ef71031496c0347bc0cc68adb2842b2cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160625 Malicious code in modirai-fuhoupaia-jastyfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc300ff402887e95b1d1526361e81537a246af9374950f270edfc7f855a90e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156711 Malicious code in inufgi-gotumafa-anfufafoaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f265e76c5f307bf1771887487b0734bd5da2a63d33dc94fdadc61c968af67edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fia-jasu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d0b1c02f18e37a06a63ba8be4a951c27fbc0578f07063dfce0b84559c401ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amugui-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69981cbaefa32a0cccf1e92405b1698721957d10ff7e0595100bbc4e56506eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poliaoz-aikk-aliuanai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f586df4a2a3a854c8495db582c5ca1cb5fd97f2889f4c60fd206188b3a0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibok-inumliuinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436c7f656cb3f8da5e23d756a3e52ee0c08bed95a67fc50ee9ad24b833dff760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168257 Malicious code in tealove-dana49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7244cf1c4c04d73f884c8075d7771098190fd5a6727ec628b57dcba12d177caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158089 Malicious code in layla-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83fc6c3d23709d3e1c969df7593fe777220bd57a65292f8d3b6476bcc6a030a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156808 Malicious code in iomodra-fuoa-jafuliafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fef930aea972f4e6082d151f878af67e7699d58958de4e0cce2ae6609a51935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-pyxis-wasat-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9279999eb82f4ebefafb993331a9b1d9cc9bf542060779f1d7b327051dbaf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-betelgeuse-build-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8705cb1053e89ed2a14becdd01e0d3d70ae1c4a565c3176eac6a1bcd5fd245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141618 Malicious code in development-deimos-commitlint-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8992138e76f1ed0ec9cff5328a1421e94b2128dd4661be7b703858e319735d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-ursa-uglify-js-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985f726d71e755b61fff982fc9b025f8e561be5a05f121338a0498316d029b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-halley-chakra-ui-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99400811af7181c5ba9c0108a2a94f290339d0330cb50f07159e1130f833f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-redis-eris-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ecda13dd725bb7f0a39453bc3e1607040cbc5abf124f49a3821af1777448e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-apollo-postgres-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0c504442fde8f0ce95ca21f1150316e44ec42643db293dbf940a6307e028fde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...