MAL-2025-167997 Malicious code in teagood-yakuza4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 142bd8668f05426154fb5741eb2bbb073621cedabceac3d876c0b182ed8374ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167792 Malicious code in teagood-sukuna39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2784eda8eacb69cb9ceafb09edd4646431dc84f15aecff5825fc2bb1c3a84d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155386 Malicious code in guras-asia-vietna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5dabe0b3bda2c010422810f9a12829c5bca0a0cb1f1bd4f1c3caa22e1623b45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161585 Malicious code in nabuf-otoiman-igamoaoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8e00bc3dddc93e3f4c6811426301d9e62802b088e296b96362547ed99d5a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165760 Malicious code in sau-nai-iyulaimuap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a06a28f385954bcb04106fc34f65ae384814cd929508d3c98b3de293d62ba658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158146 Malicious code in lina-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3454ffa355326537152e2c8d86ea50a99c1ec17fec128303f10a01f43374f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159991 Malicious code in manuffak-angabofi-gun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e42ba9c48437e930a57e9589bacc6364745cc95ca7044ecd5e97846fedb2467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160067 Malicious code in manurung-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10421acf16619015bc867ab8d27fec06690b0b5643f0c4bc7e5c2edcee0b43e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162364 Malicious code in nokire-arhani50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d7b25dd27953e536117a1ad439053504af6491ddd67cef5e32714f6aa552d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-koa-dotenv-safe-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808c73d9e9f389030423bb79948118805a5bdf318cf7822ce009acc6fb93fa32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-publish-algol-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94ad0c7f0873eed2414d8735a62b4acaafa6114b5375c2436c1ce6cf3fabf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-betelgeuse-chariklo-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f12d26957e00101409aa7e0c2cfb856fd8a82c85b7b2a264cd249f286106c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pm2-algol-flare-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d16774e2cee4ea961f6c348bf4e92a499bdf16408452f147c123b2cd2506eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-aether-eleventy-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2ac218d0200b49353387650eb8b52e2f86cbe2247112a75355d2a383158a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcce134916e9f9c15c5c57472e9bcb03256befc163c2ef8dbc09f3775477df56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143747 Malicious code in iota-umbriel-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6985abad42d26bd68fbeb023ca6e733a1830b93092f21fe9c4b8cd966ad3ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c1914fb248efd5238e86553ad01dcc8e761e3df13dc3ba91bea0927460f079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slides-supervisor-apollo-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1595e06feea81377f062048d00a5c9f0a522ec6bd4fd8422ee3423902b77b5b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-phoebe-package-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982866fd39617ee1fce0dd6dd16c6ce9c1e10f05735ce609b8f0921d02c7995b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-pavo-meissa-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e8b50a01510c3c6be8781d310dad533e91a7fcbfd0957dee87343c3186492f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...