MAL-2025-156537 Malicious code in intan-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2880460aa2f09af6e9b591abbc48b933f496c0151d7dc3b7a021725a56c8d091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150375 Malicious code in @mipta19/gphsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 993dae819305103ff8541b400c94e4f1854696019b1dcfd91342a37842bfc552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150540 Malicious code in @miptaa02/awfae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c29110358774fd1ac00a88fb38cac96ea2d338811a2273c72b67890c934b2129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170165 Malicious code in upilkila-lukzli-ilazou (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff65b318fe405051c9fbaf2244cd394518b5244f0c32a5834dc464cf6c3c036b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163900 Malicious code in nustar-miuyu-nasr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e511ac4fa24e29a73d0d21f72bd66df53cbf6b70c3b4ec98c5de67fabd8d2a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151806 Malicious code in aiboa-mioliupe-agatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3da3f62b97a4d41813f8a4e8efe548f4f1ecfb5386cc6f93fcfd0aa9cf0e2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161361 Malicious code in nabuf-oguuof-dausuhafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad295bf456cb17efc8daf9bad8c12328f42fef961e8f4ec0cbce7704aa48fa4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156626 Malicious code in inufgi-gobali-janigufga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328c99abc0536df82897cf3917406658b4dd4c5807d38f9bea48f67459d64dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169565 Malicious code in uaragifa-maranfu-safi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adba7508f993db5abf8e31dfb7de4b19e01d02217d45b05b0b7393f9561fc0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous-coffee-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a39e55430d666ee64d48b67fcd7913f31dcaee9f2e68464d65e3ebfe72fc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-loopback-uninstall-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e158529ae4b1d9cd15ea986ffb47caae4298f787e4f49028d11d8a46692983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-grus-bellatrix-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2a51ebbb849846453bc0fd4d1586326a1133e7270c457e0aa383d38414111b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-duplex-tailwindcss-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7098a9772364fd84bff79ed48301a9ad9dd64fadccc0f0ed96c62347ec867551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in style-loader-radiant-wezen-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d58f33f057d544f20b90cc7eaf4e8efdaf877ed6e74e3ec3a817441c19fe082 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vuetify-node-config-cressida-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293161802f07c9de6661d6fe9613860acf582af0194c832439c21fcdf8700510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-gatsby-lint-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8459462649e24ea2121d663714ea09a44764f3c854c3983972a63b558327cefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-centauri-less-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957fc566741844af0c99ff38cbca3b500d39ae7fff7e88fafd0d84fa24ea5a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in npm-europa-cluster-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18a563a155a4fcc5190b127922618b5c189c218e5ce7e7be368f7fee7d1668e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in package-karma-europa-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23bdf6b5e512069ce2e5a363f939de73973bd72232bb5ed3e204cf11d25dd264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-sagitta-gridsome-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ab02f0beafb5fa437dd180f105f309ce3d3df62066c7a2ab2a0177deaa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...