MAL-2025-155593 Malicious code in hafiz-37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a404937eef1a48885f91dbc0046ea6f12eb9ee1a353feb971cba9672871224cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156813 Malicious code in iqbal-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298da9a07bbf54a4390146d4392f797fb08672bfae44a2c94d222b6bc78154f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155822 Malicious code in huda-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ae50f2d32255f9144124d22c6063b67bd57feee08ba66d1dbf4f1f71e2fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157646 Malicious code in keyla-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb54d5bd28983077ec5e1faddb739c2dc9331fa90d141110f009b6ce508bd42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159951 Malicious code in manttu-nuyati-muadfiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5993d5b022fd93f21983557c73e48ae0ecce98091d5e53edeef929c98c311a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150991 Malicious code in @miptaa02/tunn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02225443fcc85151b0a4cfac64cdd7de0bb2565f19b531750bc9f72056906be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153546 Malicious code in avomainah-frasu-ofrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569bbc6bf12fa10fa1bb519a52f0b3f06711ef82d821fa293bdf2a56a80bbc5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157285 Malicious code in kamasada-ntai-ksdyasaedi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a0b2bb0e30687a7dc48d7a0e32115d846a38402a912d63e2543393c2910076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151383 Malicious code in abina-amugi-anupcuamai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21fce1fc2d6aaead7766094bad279014bebc3beb9ed32c808f416ea1e1dcbb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158495 Malicious code in lookingan-nalako81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2420eb38e98c0781c735f6cec4d899143b22747f7ad5c3d59597bbe69f06ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159512 Malicious code in manaf-asin-nsadsbsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55fde04b6bc9d859b2ba44b92c084ce851478a623e3e56cc497e2227881c9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4169056fa8ab47b0f68bc6aee1517b7dddbbae114ca0d11fa522b8f666ea1ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiganguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dad3023ce9f15c05e58eae07605108376df6147cc0aa3edbf2fabc4cf89317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mansila-iala-maonlauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854da5a9e878bf7fe0746a79860aa1ba3e9d1e5cd6c91035a2bcf210dcab29bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary-indigo-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db18008577c509bc4c53976acb62380dc68522eb253fbd3a45385b9712794be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-config-semantic-release-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab31559c330d70dc0ab1da086a193f36a25e3009f45f2cde44c9160ee0b0740b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-loop-uglify-js-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-spectron-webdriver-mdx-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b8d470d321ab03a10ab9f4052b8c7b555af0f0125d6f018b30dd015827bbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-carpo-npm-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96538ed22e9fff64506efe3185499e55d1ce7e490f55e0a7da4becfb0b9d7921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-readable-dactyl-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb3fe8fba115d5787ca57c1183f16a661fb0dd62f372ba2f47737309bd8cd39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...