MAL-2025-164012 Malicious code in parwo-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be543d4d943ab6bdb9c26e1c95884713b9338f280f05f03b62b6e615b05c507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156689 Malicious code in inufgi-gotmua-anabnzai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39898ae8af192ed0b8e2c4219d58cd4fbe3acffd372155c3864b2a7123cbf2ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165890 Malicious code in shilang-poke69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16afdacc22a86dbd350bd437428dc2eb35d5fd7e33a450fe7d2a07027d6eaeaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159446 Malicious code in manadsi-sfda-muradadiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eafce556d907e43cf5d32c454524bc445129992c851a17806fe6a2b8ce35db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-iiisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc2c6bfcab95b5e9cc3735c978a38f4eaccd8e2bfe80f0cc00803b4e3a34384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-jump-molecular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dc7f6b7e102985148ad83d0c2855c1b5ef00d74ec0f8e4f58905a4d24c171d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164791 Malicious code in rinto-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b7daa63437cfa1d34ea2d875865b340cbe45702b33c1da361c9d4deedf4181d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ijdgh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e778dc04a22d81df929f8e5717bfebdad156e9639c67610f76a5357a4f97a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f23313c5056f49e3394f3ecf1e1fb87de4294654a788124190d37805429fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6067555ade4fad9dc170a6416223b09fc5bffc61ca14ce6e3cde205d3124ad19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154106 Malicious code in cinta-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa846703c0e84e9e7674bf635d34a5f27af6b87342b684898799ae7d2da3b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160908 Malicious code in munir-nautyt-minahas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06a32646191fdb5229e4e00e2c6df2f54a17efc5ee90409a6bb98b30feac76a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149227 Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02af8e5f5322a6dd20faee018c741ee859aab71d39ab4c17c10a576073f4f1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146329 Malicious code in polaris-colors-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219a46e3ee99193ab56960e9d2feb421f49c26b8e95b459a6ce6852f923647f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147529 Malicious code in rollup-plugin-zenobia-cypress-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a921f0fac45950b56d29301be0611380aa3275718a518253a944940bc853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147390 Malicious code in restart-protractor-auriga-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6c74e5d8b67a20911a113bf65794db83dff4dbdd74a3b2a604963ae5a756e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145922 Malicious code in package-auth-xanthus-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68cc5375476c81c36c83cc97476d3cee652e85e96e6b4b8bc0d89151dce75e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145542 Malicious code in node-sass-google-node-sass-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 916a91c4d8ed0d001a8049bf53130bc5cee5f30c571b7bbcebcb9ee50036dabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...