MAL-2025-153224 Malicious code in avminah-fagnias-ifiafagaag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b3a4d44a8260711b9c83657c80531b068969adb2703fc81d707dc1a1ccac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154858 Malicious code in fadila-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7788e5c796843b69379495ae7cd2d4e0c9594a61434045c326ecda063e11310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153113 Malicious code in avminah-fagias-iffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c71292ac706619312ac22fa3d5d9cc1a608e28b7e6f1dff675f506ee968d27d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151027 Malicious code in @miptaa02/wfadd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07bfd1c851de3f4127e3e2e0626e9a1f52af050cfc0085eb4cf15f920abc92dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159602 Malicious code in mand-nomi-muu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b58dbdc0d239b38d918045663bdb620cdfbc68d576f5c4d336109900e0a08b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150188 Malicious code in @mipta1/redx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2702f561ab8f3fcce3e6c78a772c1ce4699b3c9cbcce8d42bfd8e6e2e12e36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159492 Malicious code in manadsi-soroiadadi-nasidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1132b986a32b4ebba3c31b166ea3adf71ded6ba39d2e63e1867c27f18e4f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168693 Malicious code in tealove-reborn19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4072d7c7e1fd15e2a8e998f6a6267db5e7d384e487b0b6de58bb8057b3c5a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156607 Malicious code in inufgi-goa-jamufgaiaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e00a2b83600fd78f02ccd11ebd56d2e15dbd98692aa21bb55746cc62db61933 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159179 Malicious code in makan-aiga-iffu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbc0d497064e3c873edf18fd0a729e2f796b79bda07f9fcf0dff3b119b6c070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148950 Malicious code in unchanged_planarian_sapphire-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72787ae4f6cb01641bebcf839c196d1d45de33aaff00cba1b43de43efe1469f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-css-minimizer-webpack-plugin-titan-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c9656584a978019dee03bf19b47e30ae4b2e05d85d67f9e26453d7927fbf1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-sails-izar-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe12116a5a42b21c1503042a0ee999073c715b3155d77fbd19d739f3d29e19e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gulp-convict-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82800254ff99ec92da273a62b425cf6c2d0e2c9bc1c238bb30e856e0ce4c9ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-ophiuchus-lyra-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee149d2a64f1d6e8ddd300e94d9454e3a8e857f650f27a40fc08e1c517eeaa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-helios-umbra-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6d89c00461af5485eef56e494a79bc293a350ccb3ce5239a81251518ee5821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...