MAL-2025-165165 Malicious code in riyanto-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b299852d53d9fa7c83fcc61f5c0d75e06e7f5d9f18739976ec0ab4c2aca7a333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156021 Malicious code in icha-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c711b5850a2877543da0a94e16a7d877fbe85e5488030786a92cead954d41b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155681 Malicious code in hariyono-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64be2ebd1dd0b2ebf1fd6def742ac602cce18ea154dc45155bc2631cf175232c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156632 Malicious code in inufgi-gobali-janulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfc27a04df0933fe4744c95c22b14ecfd8e54652fbaa14a91e4c2849e60ceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165363 Malicious code in sabua-muhayu-tadugmafaia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f572d73af647e61d8074bacdf3219024134cffdd769e969c4856a9c90aa4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163278 Malicious code in nokire-nanali26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd9af8aa8860239eea73f6e1e367dcd4739f5d81d25d70c37fdd41e7521ca87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156412 Malicious code in inal-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad669b6085a79e1ff2f9920d09cd7a0177fc3ce85c7f218ae13814f8e50a4848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164616 Malicious code in ramadan-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d4cba870e16246b560e9e008506e4ff95a965510c2bcebc9725cecb683c1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160498 Malicious code in miracle-diook-ujaaik1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b611a6c5f52dfa98616543a9bbc770ed1136e4170acc94076da11713fd1ca5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165085 Malicious code in rival-poke97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029da1546e03295e8b4ad8f111a87af149f1201dd69f9c65b23dee13ae2235ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-bootes-betelgeuse-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b326cf2963fd88f54d0edcdd72259d0a59da79d16ffd8a166b7b5e4fd4fa3c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-neptune-phoebe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d81a737a925c43093e9812535b6aed2ab1b2626fe41ff7c380942773a9612c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-config-quantum-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d85d83ba340c6e6a6415566fa53727ebb49ee6917c6aa88ef1866f08efaac842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-pegasus-ganymede-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8806337254abbb601db4f0aeea920ca50a9164692f6a8295b7ff69ca6582132c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-oberon-dotenv-parse-variables-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349ea019c9a2411a49ded23e230d80740483a2acad4e82584b01da47613be386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-barnard-bunyan-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f27119a3e95fe00266bbfda55d5c45c50fc7ef145b70d15e67d742e46f33fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-cassini-gulp-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-sequelize-cordelia-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ede57c525fa64420cf83ee79e24cda9ddd78715235b24f77a61720b1a7045f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...