MAL-2025-157908 Malicious code in kupai-ukuta-jokaiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 436b0e913081917ab246faf378378106899068b3f948d15f36869f65f21ca4e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159288 Malicious code in man-nonatai-tgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e12b406c5c8b9ff642186c54ea06a52258ce99b00633322ca154aa7ff2990ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167440 Malicious code in teagood-nalikami40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa34fcb55725fb32884c885e211807cdf1f7301f5227e5e826aea44dd7579649 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157010 Malicious code in jeep-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df692b5b8bd660001b29b8b806c589375a802da13544c884006f51eb3b1f8e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153587 Malicious code in avomainah-frauu-ofarfqau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70b44f0fa44a5458a60139a6b07974cf5e53bcbb7a11c9b4eb01ee73412b6ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166789 Malicious code in teagood-cuekin25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e3b7cbceb1fd6a9ca442c33a1068673e3a346fffd2eacb9d794e3f6e8b0b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-mensa-commitizen-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3272fe5c8f9808cd0044a08766a3758f1bfb12cf816ba23e044287cfd572e3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-nightwatch-jest-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc5ddba454414b66e34db5850c8df0c196c3aa804d39005db9e389cebab5da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-ariel-init-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac2f1987be8277ccaf644d8fe9257ad83ed8fffef022e1637db2b250ec6394d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-config-angular-commitlint-config-angular-solis-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb3f567bb082a9917a4e38dbb29310a4010b6d8c0b2d6a2016a2ee5698ad2f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-quark-antd-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86314711951e058560cda1b445646d8c02da1a3a08066a8e8f749f38c1c95e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-xerxes-elara-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e8c3b0a75e3d1b6080c8124bc4f5c0c3de6d2e192c28a952d63dcbdc89aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-start-shelljs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5108c6eb4fe974479b148f8a7ca0b102bd58ee2cf874ab49721bb9ee4552d701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browserify-mongodb-eslint-config-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 626993bea82b77bd813c972a1d32f6381661257bd59fc76b4260c694cf58ef2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-async-meissa-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873b499bb8e3a912398350cdd8e55638214ddd9feea30efe08c7940413b2bdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sequelize-meissa-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f06e8e9f443fc6dbd135e27fdb0b50e6a3afc24eae0e4dca9d29dfd7357003b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-concurrently-hercules-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3ca3e3f6a93be7a3b7c1f73be13aa079cbd8125e49441cdda0d0fbe78b212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...