MAL-2025-168120 Malicious code in tealove-boy15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c1f9351f72d137383ebcea81ce55956ae0fcf1a38cb29e89e29ffa6c7a6d5bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-epimetheus-chariklo-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cbe848b613b149556fc1e2da071bd0f0b9920973ce442185806e397d958f406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-test-elektra-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58cd74dad8498f35be2b42b9cd2779b127b6ad45ea4954bbc77ce2fc2719d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-cz-conventional-changelog-lint-staged-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5dbcbf08783e99ada377386d44fdadc726fcf1673df3f9a84ba080a9640094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-scripts-scripts-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0409451d1fd539154e63a0e4b69cf370ab76eec634798644da864bf87004163b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139279 Malicious code in aldebaran-grunt-cross-env-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942dc7567872d64db37f4d53372787e9b8e5a11a4ea0f476f650bc9815625904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139817 Malicious code in await-yildun-canopus-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b3f8d183c6a4f0b316edb71ecd07c53680a4f679faaaae50a2e104ed9b1332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144953 Malicious code in middleware-electron-builder-arcturus-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc0a89d2d72c450e8537ac1c28fde5acfb85995789697e16a6b4793a011ce5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140226 Malicious code in bulma-remark-fork-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37912dda2c1fc048a26c13f8571365845e50058fd84f42956b4a136617b0975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-white-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb81dd3f6a1c64968e6d832222379c22d81a0d68cdbb8d92aee62cd51375d7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d552e1c3c28ef52cc2746782daa27b32baf2037da5968250618373301e68f5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-takokak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf63332fa47767c8c10dab12532c3018c5845f3829d57af0916b48c7670d024 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-pecel4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30afbcbee31743ec26bb09420641a6ba78ab4f1e81f944e38b52450a45bea62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasi39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198298b0f571253974b78139b23e20ba5e1dac443bf9ab3b325d59ceeec0915e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cf3a6faf59fa6785996986ff0be567ffc6443ff4c9728f9f76b0c830ecb93e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d5b92156973565a51da48210eb668dbadd63090bbd7e564acf8b8c6cb5c4b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133028 Malicious code in eko-kolak55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd76d8092a71647c58a2231c659f353aa3697b9f90e6ba0806e378e3b2123b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132315 Malicious code in budi-kembang87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e93c696d0f49e7bf036c612f4fa0731634540ecdca011b13458fba1208f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keraktelor19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c2cedaf52cc550e228256973182fb86499b618567ae1cdedfc950661d126f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-lupis52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8950de8b059b268ccd5a5a5457a6f066d667badcc262878f63bbf4f0ec71e706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...