MAL-2025-161926 Malicious code in nasrul-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c0ec1266ad04bf94a857123d400c30fa6aa5c2c4365c67cbe7de31da1351a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150352 Malicious code in @mipta19/asisdssa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783219614069c28f8c72a17683c2ba5b1ecb9b6f6c52689a00dc0574aca7b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159309 Malicious code in manadi-scaiasor-dra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc63bb1011bb6a817c8ea4671b105853c15f187a8ddf7127c93f561e9a9ad48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169152 Malicious code in trevora-cir100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40f0d2cb75b0d14a590f5989243a7a322278f340ec46fe156e96d91ad36297c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169679 Malicious code in ucok-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d6a5cf152806eb296592547332aeeac4b2edaa17e4c2abf0a281758eff4c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151989 Malicious code in aibuna-mobiuple-amakora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1b35deca1f30e9b278b05b52b1c7c7e182dc735b3ea3ef967cbd4f16980a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157375 Malicious code in kamasada-nuyata-bubyati (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a07d22fa6e522fffbda3e5d21f776e1328708155fd25d9891ea866d8be290a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162809 Malicious code in nokire-lokcek53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d72397ffd8abc67d7a556e4086be605176fee9e7ccfeb6c323f006f193bb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139343 Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146479 Malicious code in prettier-plugin-markdown-concurrently-helmet-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01220b55cbcc05145bde2d9bc7588c46bd85939bb8352243e4cbd41f629045a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139323 Malicious code in alphard-express-pulsar-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145499 Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149318 Malicious code in webdriver-manager-fetch-epimetheus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80104e90fd19f09841b6626aaa8cbe13df52164d7956580530aabff25a1caaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147596 Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-xanthus-hyperion-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac70bc9cde391c15423db0a199454ca7b61c14d507348fee8fa1dc88cab3f789 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145905 Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149196 Malicious code in vuepress-miranda-restart-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bff913ba9557155fdba91e2de8f7c7272ae33b7af485e13141411e5ad745346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146374 Malicious code in polaris-tailwindcss-gravity-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e421f2f76fa5623b5dd332d879008aa2fe25ed6dd392c95ade3cdae01c4cc7ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...