MAL-2025-185495 Malicious code in apex-tool-colors-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c62893645bd2284f60d2079d955465a378a688d945047e235e72710ec44a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186582 Malicious code in development-warp-geoarchaeology-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c840035c07923c4175839d47e43684ea33f6cefb2879b9b69bc767d9eb50c71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185897 Malicious code in borealis-promise-spinner-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c7357be2aa15b46b85c919af1456a68d791ec27c6ed54c2d089fda32b2e8e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182782 Malicious code in indea-fodioj-aganafau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff39a4c72b141dc629d397c5a80b698f6ce2dbf98d9edd2c33387b8be4397d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179907 Malicious code in lookingan-jeje36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2c46fb78f077cd586422b1548360d8bd6d547fbddefcca7223dd26cf93f4ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuyar-ida-rada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20df5c83458ef2e9f72c4f4150aa311c3d3986317458573ce5b86279b6aed883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45bf536e6cc82884762f6c4d22b3544151badf5be5a6d1a432847c426ed971f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fasg-fgvgganda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f0b4b7c97561ed9450043b376a96152fb80e97da09ab726a6abbf75de6b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ognboagah-agsagshohai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c502f725ff3dd399c0c9e22f8c26606c1a8fec9d4151999669e27dd9dbb040d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unimna-safafai-acua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7e1808161ec5c28c0ca73c26078f9328bb150255c5f254d6b811f32d6d75195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a040e04e0ae6b7bee72a188f12635daa44519630da58e99584faf4e064473a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-176383 Malicious code in nokire-kushiya13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd82522ee36734207d9bbc5103f493691015e866e5f5242fa6085e9597646a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174757 Malicious code in hokage-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4424e8404da671e20f58b1df67ed3e9a2f3923b9edf1b88ec65f8514ab92590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177358 Malicious code in poglymer-ogihh-agsifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dcbcd6d25848f3364d1a80b5981871f8a8d3a2eea2c3b35401827d31295c992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172684 Malicious code in abdddi-putri-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4eefadf6a82e895a5a57d41e0bfbe0e3fd3938ecd63a235fff05ed5080e2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-faoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13035452e8c84f539b0f065f8c7440fe2c6aacb752bf4e7568e51f527d4c463a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faizulkareem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559fda3d71df948d1c17a19b39f2b2e58c0bf95a1f71a5b0fa976d7cd633afe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amjadatef (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57024fd43175c34c5348abd813049d6f030aafbf70ca4e8b37adfacffa698bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171420 Malicious code in josecarvalho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb088a70e71bde5b79233a11c16136dd3bce0bd930d4dc99acd6feed6b4dcff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in infi-gfobai-jigga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a16ff404f050987a879a64484fc30e852d65469b1a438ef3736f5873f124aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...