MAL-2025-161290 Malicious code in nabila-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95d17f6df99b904ca9e3187691718f0589bd288c4123a0953abb14ff832134b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165108 Malicious code in riyanto-124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809b248a0fb71b2ee13f2e554d5d7b248b92ec94308a4b6a860ea26ac3d0b7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166519 Malicious code in syahlan-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55126c4b76b8cd3ae1bade7ce00fce145c284280de47e04077dc713dc6654efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165198 Malicious code in riyanto-poke86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98519036302126231cfa9ca95cee8396c7a2e2431bd5a9fb26bf62224f54bf4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150427 Malicious code in @mipta19/s-codsire-1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb5be40145a94d2bc117e07dbe399740929258f08e146018d2faffbf440ad7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152140 Malicious code in akabia-aligfi-av (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ee720c69fa2056196ea48943e5b0317113faea88a91aa80093430b90d5197c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152965 Malicious code in astia-alaki-malikalahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf95752b3d1e016b84e626dad5228ee8cb79a7e4f22f83aa816d59d5a8d44a1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162865 Malicious code in nokire-loklok14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f20b1fd0a4e21d6475ee50c3014bb772a57774d95585d0de0614325af0625e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164110 Malicious code in pilauka-kaiamlbu-kiluna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed561767ed95e9744c7e7b44e7b16f00f8dca03955d2d9fe36555cfeace33f3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151666 Malicious code in abyikula-nioybnali-lauybasukia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bee0a6bcc44a5f455c538c018b068b110157a1b0eee377fb0dfe751b733f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153105 Malicious code in avminah-fagias-fimokafignguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9592c73549621914810f1f8e4f0ecfae8e18018e0b54e04f393d2b61d77bb94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155485 Malicious code in guras-visa-koreasela (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a6ab02e640108ccff5d2cc336972b09e2bdb824ce95f8dd152da086f6bed8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159207 Malicious code in makan-aiuga-fia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d288b398b129482703d161769d66e57fbd12a0e4ff03dc78e3b0b83effbfd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_whippet_gray-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a25c2754bac8cc80e2a1d377aa3d43b5fde90dbdfdc3a6904cf10db2b2b550a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal-sapphire-antlion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8010f76cfda2befd751a5c896c91149a0f373b7790b0e04c5af24947d4a6380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-xanadu-yildun-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e30439631813838d2dae6e16f87c201553d891ebe00fda0bd7ed7391701e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-hyperion-dotenv-parse-variables-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9621017bd79ae03f3436899cd4c34919e27db6e69c2be76e298958807b4f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-dotenv-safe-deimos-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dd26ce16209c77a21640e06bf2d7589940321cc0ca582d08066c674a8639be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-mdx-cressida-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f74c97d401a134f9b646a3669fbb031a73c2e27575285bfc7e10c686d79f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...