MAL-2025-153643 Malicious code in azhar-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ba0175a5defb8485f4f0ad83e718b0c1e15fc6ec44f162720cf778eb2eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156673 Malicious code in inufgi-gotma-anfgataz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b5818517aa52ff4e52b0a4bb34945f5f49f0a6d8ff71ebe239df52321e4414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162311 Malicious code in nokire-akaza93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab173bdce3eeeae19d3fe3756af48567425b97f924cf07068bf01809439db968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169868 Malicious code in uinsu-losiat-dik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607ca40db9617286de4a68e351a23476a220b1a8e9bcd8dbae69e454b045cfa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169079 Malicious code in tehnah-codfd-mant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4290e7100a231dc0ccb9b79f935abc04d6363cd2a8591b706ab703eb4e54a8d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153221 Malicious code in avminah-fagmdas-diogrga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebde5b99462ad61b975a62d80ae9c14e7573a137d51818a3f89584e47488fdfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d43fefababe17b3024f876191cf0a989cf87a9933d4ff86e88e594b4e58ddbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dajafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e45e4e06da30b6baad07f4e8a1e5a346567916adcea0d3bf8797a1cf614f5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kuli-luui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c94a6475921c6a82fe49028c914a033a2f9f551dcb947a1812843cfac9c1166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-males-l (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50df86829b9808bb86afd9b4e43db7e570f899eece0e9ded771d3999f4ac944b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-nestjs-juno-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f7590f0ff3753b613157316d13bfbe14edecb65e1df69e658f416e56c691cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-dotenv-parse-variables-foundation-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bc4e43887209590a044bb3f50e640e01143b01b3499e17e38f7fcfa18a28875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-xerxes-repository-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-inquirer-jabbah-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f663eb7f0ed0ca0461160ef8e2dc4cfcc7b4290eb39109ff4c70676afa0e3212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-enif-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df0ff5306cd2b232804f84ae88eca9950582d4e2b06f10bc1b0f12c2a6c104b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-vortex-soap-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167edaa616eab6481ec791de4d0adf51b73b0d4cbb0df8373c2d1a10d01b7f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...