MAL-2025-170131 Malicious code in upilka-luzi- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe84a893df3bf2c9813cf73068b78ce7e0a16f4897a12f95b7f423aa1f09b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156537 Malicious code in intan-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164788 Malicious code in rinto-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0215c4d31f8e54f3a4a55c0c3d36a39e8a4d19e288192af5b0d51b5728b2dcf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158595 Malicious code in lookingan-namakiki80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a24f3d1327f2f960e450b4a852c71ae900a66543a6d3eaf88cc59c89144a6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151468 Malicious code in abiuba-avimun-abup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09de1d1edd61a2999279537facaa038aa4d956b2036b1bcc0b812f17a497aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156253 Malicious code in ilang-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ad1f2d892ebba8f9fe3501fd9c9ccdbb39879e3a9c931d23035140ede0c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153204 Malicious code in avminah-fagmas-dioga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3304ccb1743474c224a28e6c8cfc76c0b203234ecc4747207a327fb0e1c607fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159309 Malicious code in manadi-scaiasor-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc63bb1011bb6a817c8ea4671b105853c15f187a8ddf7127c93f561e9a9ad48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168791 Malicious code in tealoveness61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9987c4f19b1b981fdc445d919e50fdcb44aeb1101b8714782d1a2b925d94b852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-gatsby-lint-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459462649e24ea2121d663714ea09a44764f3c854c3983972a63b558327cefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-centauri-less-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957fc566741844af0c99ff38cbca3b500d39ae7fff7e88fafd0d84fa24ea5a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-cassini-apollo-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80554e528c2a2f596f1e60989a7b44f1288d8ee48a9cbc1fb9477c1c18324a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-library-cors-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa1eb5e8c227964d009dee2eefb0f42f87b23ce32debaff53c017f95232a8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-registry-proxima-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec56fe69eb0221d54ba68935b5267e8c0878e966365c32ddee036056e961c4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gacrux-configstore-andromeda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ca62aa2ca7610c4cd5bf3fecb7bf63064685d407bcf3e930a3eb2824e01641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...