MAL-2025-170554 Malicious code in wulan-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b83d7e3a348a2e83a9df2dc5ba40729d9f90c3fb8394365c3715f43c40e3a622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163437 Malicious code in nokire-sekiya47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c37b2fba754eb2e66d92937444aefac4c2f93dd7fbdefa7036e77b4ae91891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159498 Malicious code in manaf-asi-man (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5d41ce2417a561cac66ab3aff22661c5ab754e45d37ec807c51199e34f8633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162256 Malicious code in nokire-akaza43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae28478d9c97b69ea605d86ea7d86284fc66be34b4e2e63ab0bb475c76b706b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166177 Malicious code in suharta-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4af6392c8809b58625749a8cd6f3df32a7ec09b9604d269e9310ed64ef97fd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153427 Malicious code in avminh-afinaoofssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff64ec1120c6a75d49b7cf094e04e44426c7cc42086fecc8cdd5cc17dc628248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159073 Malicious code in mahnud-mau-nanaayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b04d32b02fde0c4293b500f7f54d3f19fec78aa5297b2b97165c135e48f522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158019 Malicious code in layla-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7291ee7f2bd77f0069801ad65dec55b1ed4c13be956213db821517025fe0189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161081 Malicious code in mutaus-manis-nafudatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98805c33bf1b395c67955cc9f14dbb8f72b6584d2e7a430d27ce89ea38686fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151743 Malicious code in aciyua-idust-daajua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e77667d1045cafca6b0a72e389d2c87a9ba0b436bf461a2f685a87cfb8da6422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-changelog-dagda-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc290c2c78dcba5a346d338e0129ef0840d8e48f706f0fa46d08a8abd15054c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139964 Malicious code in betelgeuse-airbnb-cosmiconfig-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2ca7c054c5dc5dc4749da5d34633882bc0f11a8ea5e0349b8a44949a61697f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-pm2-cosmiconfig-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b442cd6b7fe699a932768c2d49b7787c6c6819ff639e44e5280a215be7563f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-ophiuchus-jabbah-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66999af8e61119f23d545bd7b09220c72d04567456e7c544ab5c0b4e0198d68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146964 Malicious code in query-bellatrix-helmet-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2fcbba4aafcd8739a6c5c1f7fb79638cda46c72a032d077c17689398101f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141456 Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9ebcbb6b401a4e9dcf5b69e8d8f3e68be1a9f58d56f30831dd47a44939695ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140548 Malicious code in centaurus-protractor-pegasus-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dcc555cc9febd60400892a5d0811995a23d932397391f02eebcf61fcf6660c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145403 Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab8f182e93ed124506286a8c5600abd6e108c7e992000981c8c480610039da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139998 Malicious code in betelgeuse-ora-grunt-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6538caf613979a45bfee277338a82e9115c7231a4aae8aa4bdaf88740c452d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...