MAL-2025-156423 Malicious code in inal-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e082e400b65c17985916d122c83b18de4a72164f839dcadd0272abc71bf164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162563 Malicious code in nokire-genji71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a29a76626b2de2335b1bd404e816af9d576ef6be82889557502b52c1490dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150437 Malicious code in @mipta19/sdd-d1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf0772db39c1363ad20ec4e27ddb0f27501d136514a0b4377db604201f24674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169210 Malicious code in trevora-cir18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54876d48e8ad2f9598bb8366912813dd98b3e46a98822512bc61082307b617c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168962 Malicious code in tehah-kalian-kon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac37e48a1f9490f90bfc7ba0a70832169ce59791c38a7724467ce1af21d5db52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163548 Malicious code in nokire-zabuza57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a145e994af2843d9fc9f92681843bdacb870fee8a3ecd70ce18015e4998510c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170279 Malicious code in verify-aikun-miau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a13a7acbfdf1222621a1e0e6503c4311d382035a1e1fe451cfaf865a68be9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afaais-ifafoafofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef38fd30ca7122fd5b169bbbd3baa6973b9053d09595611ef3a7502bc494ab31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155775 Malicious code in hariyono-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa8e3b73ab7207ba4bdcb56a75f673c78c1e7173ee6ea9c46393a29e44463dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta19/wdub1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ac396b9f0cf18ee4d560cc78dc7803e0119ca179a3286b99b1e18fd04a25111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168259 Malicious code in tealove-dana50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612857646f3e55c836dbaf2b30b5141fc3218b360c25d382535b25e12046c902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167703 Malicious code in teagood-namakai48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7709d3ae5b0cfdffcb4facb79d8b72e48c23cd0ee093cec50a8295c14faec8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eleventy-epimetheus-rate-limiter-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad9c1494c426eb22260ef16a91168d268cb9fd31c3e614a913bf3df717b7dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-bootstrap-triton-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99fdd7d5010c8bed6bd41e03d61290b096febab526e48988e139d60019cbcbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-antares-command-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3d5b92538efc5003fd39ea6c07c4688b0790c70dbc5345a0b1bfbaa470acab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-apollo-sagitta-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-quark-andromeda-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a080ba590ad542c293ea5b3d7625e0f1ca1119818b77c409f20bc816283d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148384 Malicious code in superagent-kinetic-vega-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f052313de57a449d3ba0452395a8a82d566127cc64dcde2d2840853d301a7270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...