MAL-2025-169283 Malicious code in trevora-cir84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be86b6673227fb62c0ed499ba1843891ccc8c1d52097def5848bc77f9d8448b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-aruma18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6d8de7d9ea35970c288d0f363e829369e068d342062e77bc41693ae0ff6e7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153803 Malicious code in bitha-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2118a02700f11ae5ae19b93c46d65ab2fa2124bab75b22bbae41165b40a4dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154818 Malicious code in ewa-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b1d0075214d4ad0a31cbadfb1fb363e145167fb452298e0d8a21f54959b055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155365 Malicious code in guras-asia-ban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857beb4c00b238a20cff9917d1bc515b2014fe6cb8557955d1f3ef9a300a3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155094 Malicious code in finish-sf-maewt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc96e573187cbf4f15f2c724843744a270899eae155f8a3590a45efe3e14c553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168250 Malicious code in tealove-dana42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e0451a8dbcf79f9540e001b0513efe485f69a787e366cbb9797e277c41d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164749 Malicious code in rino-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7a7ef108ef5693025803ed428c5871af506905f0da56f11cd95bc008b63904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160950 Malicious code in munisdr-nserf-saad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245ee70a72c613014f8cadaa5d492f0869de0d5bdd929a323b87000a8b7dd997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-element-ui-leda-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7de7e8e01d9dd88a42b0afa84e8202c4c0324c2cfe9e0c31edb174eb92d91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-materialize-electron-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed6bade7d741e881a1ad5db1fc1aee5b73c774ecea26fd42ad6d9811499188b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149688 Malicious code in xenos-repository-non-blocking-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57351d857a5ef45fe7a7fc3b1ed7e68979fcadd41772760fad62f6d92ea5cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142931 Malicious code in global-dotenv-safe-mysql-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c214ccb52c4d406e705a660e00408acf6f13309f35035e2ce944ca6a57c77a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148675 Malicious code in titan-child-process-colors-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47fb75103e307e237f68dba3740fb8ce1abeac8222169c1b09e1b817334b60ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146281 Malicious code in playwright-fornax-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91a879071e13ae5f0848d6bd342f7f9dbd34ab7b15720262875b6ed4438c25d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148651 Malicious code in thuban-ganymede-sirius-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3e9ae9e62a1196b1a4ae777bc6ae0a4cd8e3f48f279f852f8802edfd651784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140176 Malicious code in buffer-update-puppeteer-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5463711dac655828a2734f0815568ba460f52891e78f95e73fc8bd7bb233b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-harlequin-pig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0efc01ffd237e30ebc8d6127cd738b563f653d3dafc2d41d0dbb803d7037bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134812 Malicious code in kiki-mangut42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5f96b09171ed487eb27a571cc3bfbb848914b8a5f525fcef3a04e6b5444cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135603 Malicious code in mulyono-gembus15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb8fb26dd471cc68bf22b6ecb210b8a1b0aa21dc34ef19c7c57062e788c948b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...