MAL-2025-158748 Malicious code in lookingan-namala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc75f2867eee5906bee7edfa531b2419135acc51ca84de7dbd6d22ed4798ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-agaofkafsf-gafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abbfa987456f57c8c87facc77fc6b51fbcede5fde071a5542a25006f88def71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152604 Malicious code in anaisisulah-paufai-as9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7923f71d2ba2a23932aa1226b4f7ad52591edb86877f49ec78e05db4db7601ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavil-maasdfudfdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551edbcffcdcc1efa8fc505f81378d7109026066944488f01df2cee89858045f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akilanuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0734ad23ac7d2c8cd67c6c231f8b273a605c8fd59038395b1391094a7f1db1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154527 Malicious code in diago-kulpo-lukahai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6bd981bd936913b26a989c37a93a1153ad9f1665629e7a7bfea3713caa2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155619 Malicious code in hafiz-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724d28a0238fe7931e5837988ee95993bedcea50c7223bde234a9def0ccef22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117fb027bffaa819dafc35b91d55ca501f83d570a3e09220cfdf764918644584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1649540998390e9eef7f2270c632437c1953e00b0bbd91c122090fe7ee26e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157116 Malicious code in juris-frazs-dgrs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea4decc0614d6b102f205751d3ddc4ddc4bcceaa2e875aeb4496b79e9ec3fc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162358 Malicious code in nokire-arhani45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecda597612b829d17979a923b9b4a456055ecf7a3edaa75536ea8ef6b95d8c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159366 Malicious code in manadsi-safad-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de21a9deeef6f9f6e483d0762ad3dab5979d6f1f1e0dcba8bdcb494b3fc107db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-colors-xenon-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea9c8aeb5c94be268f5eb954b7f3da9be1607c0683a980ae34c42e812feb1dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148035 Malicious code in soap-spica-gemini-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bcfb260f49b1ede378ff977a58e4f393dc0062910f976fa5522ad95f9da14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143705 Malicious code in io-restart-less-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142440 Malicious code in fetch-deimos-acamar-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b897e3a9820ef17d02f095ee4115b692e66dbcb446858ff17bb002112e015788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140829 Malicious code in cluster-kaus-tethys-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acfde777b4bd381717d500a5ab96e8adbe32783b32e2b42c4bd4231186c8fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139514 Malicious code in apollo-halley-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 398cbf2aed0a021ce9867d71a7b7748b8c94de42d368fbefa3c2b94326010a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142153 Malicious code in eridanus-nightwatch-draco-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897faea076021827c61bfaaf49e286cca7ae17bae43b9fff7e94eb35c29e8b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...