MAL-2025-155650 Malicious code in hafiz-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921071ea0974799c0541072d8be9d3730aa02dc81a90d28ce2eff1aa800ae33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155778 Malicious code in hariyono-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97bd55330215d36de9fa6ed493008ab5f7ce77fcc30d5557ee77abedd28ee3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157894 Malicious code in kupai-luliko-igugfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215cce17298ff84c60a80022b29b99e54ebb90052d242a69925fbbd5b1baab11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166561 Malicious code in syahlan-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cd961ff834ff9d0fd41e54cda3dbbfb94dbe72db38447294b24063ac97f8e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150643 Malicious code in @miptaa02/fhfvxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57851cdfd4e14e40aa641c35d71e6e8a298038e12b19563c944ed7e46dcde65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168593 Malicious code in tealove-okta17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 921eafc1ce0c0ee928c88e71feb06bc2bd601245ff8c2be454366439ce1bb7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166677 Malicious code in tadashi-tssu-ren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9597e5549857f09c0f7daf84d16c2b6683f293903a97f78ef1aede9341f0df10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157318 Malicious code in kamasada-nusata-budnajsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9dc18dcab9fc1c17b55e4eba61dc958ab571833cc81e41bfd346ee083c7bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142097 Malicious code in epimetheus-library-framework-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8685869bd43d0c7731b440d9340f7d9cbbb1f65bd22794c61ba2fea0e098a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143815 Malicious code in janus-lynx-nebula-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c58283b03b07b8dc5e0e6a679d5e9ea4d0b397a111371b7e52f2647e692d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145825 Malicious code in ophiuchus-kinetic-development-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cead306982c4e53b259b7fe60ba0baf7a14b6ea52db778371e3b45751817ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146687 Malicious code in protractor-hyperion-soap-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc172a6e98714542897ff86e8b096def8bd773c0f7a8b2d9a6dde31dba23d298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140772 Malicious code in chromedriver-foundation-ophiuchus-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 734cc0e1a4fdbcbaa4277defdafd1411ff42c898978cefc6ce410b296ec7f58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148235 Malicious code in sqlite-perseus-nebula-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f6b44d9bdca31d5c462ad3cc3176ab255171b26341dc579e4629fa32c15096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144875 Malicious code in metalsmith-dione-phoebe-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7fa0a724ed7a8a460cc993e6fe4b7139d1c9efafe18cecdbdc2df864e2c1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143316 Malicious code in hermes-enceladus-commitizen-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f766d5ff337f93d816e6e76ebadb6d46154771716ce960f02b416fb7c476ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148366 Malicious code in subscription-request-koa-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b8002383770872ccdad0a33557462f10d80f27bd85d0cf04a9636bc71571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...