MAL-2025-154612 Malicious code in dian-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528c488b13591ca71ec96a76fcee462fa09feb4f3e05acef3289e68c2c12f950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159035 Malicious code in mahnud-magu-gomia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e425cf15fb78a109e9818eba5a1c46ecb9c5a457708878ba7fe2105d34bf4bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c252c09b1b7184b871c5d1e10921422c31764ccc36436f88172454b3679c32f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 095401287eac283af5876663379735f7f55ab204635c0e5dec794aaa0b8188b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jimmy-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab960ca3aeedc2b2b2fa221be8b075fa8e8357718d7b3fa447ac18f14ecc7065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b61ca3e1c59ce28728de34beb8dbac8972455d95780f068af223f5047e02d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeep-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ddc983769eefb438f9559056140c73efd21a88525cf0cc4c201333e416cba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159764 Malicious code in mansila-iala-maonldauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e5fc3daf142e244a356cf2b0818145e6c585647e682c70b26d4547feaa70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149958 Malicious code in @mipta1/asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6baafae6103b4d52636c20e9056676fa2b0051f41794b09ed1793be325776a73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153326 Malicious code in avminh-afai-faauofaog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9a20497e2f49a06e703b2180808504cc5df889af55c877f4e373016b29b0ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158304 Malicious code in lookingan-konami43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dabf714202b51b99aad16d2eb01f8b4d417ca92e07260729b35a1b734032c56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-semantic-ui-publish-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71fb1de6b922a4162887d97be7ff4e0e59a478a124163c67f61a729dd21dade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-jabbah-xenos-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678aea84d3e17daf26a71a1227863e69cfc430bb5d394a840da880b8ae787a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139786 Malicious code in avior-solis-grus-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1bdfdc7bb97c3e6f4552241ddd6ae1a7be05ef2b820b1547391c9765a70c08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antd-solis-rehype-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc6c2e86ed9bc0b6fa4dd7b9bbd2972e683c9e48b1caddf8cf4c85d9304f02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-nightmare-leda-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fbe40f02d657a7917d90b09bc7249a176e5ee2697ec8b356d4d57be89d66fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-hexo-buffer-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 060271c2db1d4a1038098a84e59d8e87c5b7e3fbbbc7aed1148d0a49196c04c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...