MAL-2025-157153 Malicious code in jurss-dsf-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b177587ee9a76ddda2d7b68b5fbc3bd94de5d4a572ad4d923f1a9bde9cc75f6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166337 Malicious code in sunden-dibuok-inumaliukinuak1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab97ec451b2228e85bee1b06f95e37ab5ec25aad3ab7e300931445b2cb3b179b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161859 Malicious code in namase-namuda-bakoua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994119c15eb711b9beb93f9cf33c0043994a65a60ffbcfa9f7641ee3914db077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166975 Malicious code in teagood-lokina13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5828789d96ab517deccbc889646065c9c02e725130476e92741c8585df25f28f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157206 Malicious code in jurss-gswzasd-a1s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359cdbdef7d25cf76ada28ef87c4ae5ba50ec1193cc7205183f2e990eb3528c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156301 Malicious code in ilop-49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5861a776ede16cd93ceb93618472c7a7e1ce5f35f98ca1142b931ec95debc4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b65e648798ef08cd8a3f044b3f2fb4221c7a145330321166b0f18734e9b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158259 Malicious code in lintang-tea94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875a843aec7d7ec649b42413fe6c083667b142fad78ab3fc01a7066e4494793f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-aikn-misualaibaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aeb4a0146e30e52f07c6f7627d30233b9789e955f74401e4009e1717fcb7731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163807 Malicious code in nudela-ofgaf-gajfohahagai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685e9926e75799e65d677ac1b65619bb374298b1008d6ea59472a7fe158b171a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoenix-lint-global-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b343b3c7c23c80fbb1559d9e971d309967cfca013ab9173753f6cbf65fe92735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-parcel-helios-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca8b68bffe089827b1bb978a267e2a3fa9a7fa61f0fd932bb4bee41b458a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-geckodriver-child-process-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01143fc1217691fde402cbf013f7cf34a528ca4f781075c77d5cee117f18c1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-meissa-zephyr-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184ecdeaa3917c9291a5b535a0b3fc11bc061913eb43b8f6a9163e3a070e4faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef1665bcc2a8ec8540f9a34906e1523c5f4d6eb99e68912b49f1c6758531391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-perseus-betelgeuse-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efda70048ed2933a54a646b0cd38e0b1e034822156a10da273d06a2de20ffe7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centauri-orbit-ophiuchus-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95be8eae3b5267ee3a554f7dc53d936cfd1414b402055900c1bc3a8c763e49dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139923 Malicious code in bellatrix-antares-halley-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7459668e9fdfe7e25259ab0a5378deeef5aab39f018a73af01ee396aa5f1f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144401 Malicious code in link-bootes-framework-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6c563df6fe1722782e28266c6ef475dcd31541163f0920d045c902f8a088c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...