MAL-2025-152566 Malicious code in alvito-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bfd6e64b483aa47133e48cb9e32d95b36b860df07683bd15613b5b5f2cee4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162315 Malicious code in nokire-akaza97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baa31125c8aa316a6d3f853a2476cb5ea2b88b37b4d954dab8032b5df230cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166198 Malicious code in suharta-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2743cdc94066a07738dc0034a14de2fc6872817dff8f75c7880db5dcdb7213c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167808 Malicious code in teagood-sukuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a2dea10637367ed2139dd37d4d782010e6ad8cca6c515db05dd8c938ff0139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151141 Malicious code in abel-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a56abb9872a865ab1e8480e99752121ca78dd1a61e2ea87e6b4b6cfc5d06ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160820 Malicious code in muklis-35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4737aa42377f8a77f936f9b639174e449d29eab5926e8a4de24e426f0a4ebf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upa-lubalauvalio-ilualu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb5cbfc5621e243326564fa02860ed61938b0fdb5ae1d22f1f6eade2cfd87f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8908d912937b35a7b5a7add43fc9756f4878d1c65747576f8190d795c4d2d5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-apex-spawn-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71e0a1e9cf368723f79a82fb82524b86d059fa3abe85eee3b94013aad9171af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-centaurus-scorpius-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3bcd92f5223ed3455308cd868500f9582e6abe1081bf9975ab41468d08a549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-chromedriver-rehype-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa06272d3b898195ececb72f425e69fabf48ad1d4613749198a43e9d6738efeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-bulma-polaris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692d8948eee5220a89db98305c0c5b8563d44e1e8f148eb621bcc3b1f6e1b915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-magellan-carpo-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3558b6b1a1972905e34cd4e0a792d129eaf18c22c5621bafbe2d68de82f493b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-websockets-webdriverio-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494bff2878a97456ebcc90ae6974ee2cd47cc9a3e8e24390be57fc6741f9763e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-cluster-hexo-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8497ec4c25a6c9e25ffa655c0a28de102cd03a2893bad483366653df906f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-jabbah-google-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca5d69cde5ef8f2e71faae2ebf02639ed7e17058b5e0d56f3a0b45189637526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146801 Malicious code in publish-pipe-antares-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ece4f36eb0a4c0e49c80f8088a1ec9699232370a88da237cc71dba2575d4a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...