MAL-2025-166098 Malicious code in slamet-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1d1c207b10be3eecfa42e8aaee49face6c2c69bbe455089a7eaacc9e065c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167080 Malicious code in teagood-manaki17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb9c797f612feb6b462153e97215e810b2b0366c93cc1414435e9603d2eefec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157969 Malicious code in lala-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd8469188539e0da53669ab232a3c4fa1aac4b085fb507928a43fbff6fac4f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161511 Malicious code in nabuf-otin-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56583a36eac2459b72c9f43b0eefa2bafa495c664e7d7ad6a211c899ae9b1583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155813 Malicious code in huda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227090a2e7567011cf6970bc764175e2b1ae8e36d90a3dc669e008a21427fb41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudla-ofogi-agua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbde3deb769de68c85daf53f6a7f3130e27199de0549c19fa23b83af4d654f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madan-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e2c2bda3f63500e5944ce3a630acfcb8757192bbb3a55da45046a48574ca4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153212 Malicious code in avminah-fagmas-fogogfagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f85ab00c0c95eaa805dc2578c37108d3a95def17b00f47e7dc3a455ad15fd7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165042 Malicious code in rival-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 616cdf8e96a05653cafbb993778a6ff88bc6a8dfa9ca39d94095dcda5c92424b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164882 Malicious code in rita-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10686d08dd1f746762135148e84f32f9a845578352ff3f4297617a34c8879a07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159794 Malicious code in mansila-tfla-magazifigboli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8435c24a347d263ddd56161489c8f8cf14de78bd0083deb5385cc88173e96b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-hyperion-passport-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ae678ae08345a4d7d7ab5562656176892d798325e14613abaaa1ccfd761396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-global-kronos-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684e56e46ef72bf385d82b2ca44a9ec22885037864e2c73ade1ce4b3baafa169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eridanus-apollo-webpack-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b6d3fa2f2b87fcc3aa5e1370bba47b406350a2e793c8bc6d599b8bbd58135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-browserify-cors-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a09a319db002601bb9c9a0fecedb7312cc0a0ffd958289a8912ab9e22e6b75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139332 Malicious code in alphard-nightwatch-reveal-md-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd303c31ae8b9f078b3aedcbab70c6fc87a4769bc8241a23fb7d2f72cc6648d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140733 Malicious code in charon-semantic-release-nashira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1789d099d0d6d3fe818d8cd16de7c18e8f8e48875e2d04a981153d07e84bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147325 Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144088 Malicious code in jwt-test-elektra-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58cd74dad8498f35be2b42b9cd2779b127b6ad45ea4954bbc77ce2fc2719d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...