MAL-2025-155236 Malicious code in fitrok-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a74518bed0c212d5dfc2ae4eca65b7a5ab6c2fa3485344f242a7f370de5c525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155845 Malicious code in iba-otana-umaibtu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5106e92a2e7f3ef4c75b3ba549dbc05b9a883d8f17ac911f1b658a2eac1ba6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167155 Malicious code in teagood-manaki86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e41865f5d9b2efb9b7cefdd6ca13f6e5fa7d7312ee9a17131396039f0f3ccaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167810 Malicious code in teagood-sukuna55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f6c2a99c241c1393044c53d5ff87d7443239acbd3411fa4e2710085514a6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164215 Malicious code in pilka-luniu-kanulni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc1139a82aa930742b0d02ea59b74274b10d63b0dd26eb7fef48e69b3c2a884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160651 Malicious code in modirai-igimamafo-jai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4910a036863f9feca32f1b2f86257e58847c1d82a033961d1aa337901306baa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150643 Malicious code in @miptaa02/fhfvxj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57851cdfd4e14e40aa641c35d71e6e8a298038e12b19563c944ed7e46dcde65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151973 Malicious code in aibopuna-mobiple-amra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad741c9f9899bd75cb9b330ee1ea670c7b8f31a081a1ca5fb14a1fc9583be07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160285 Malicious code in messi-adaea-dssd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0935dd6500c83cccddada9a0c1ce959c4a302e23c838e71b580d20964952f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-start-sequelize-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ffed84011da7ff0250f24168284da93d72934329a901ecb2db3c4fabc09fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-uglify-js-draco-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26869fd77a392ca463df0916b836137bfb66b07bbfff340b495ad7e48b566e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-proxima-reveal-md-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0b1c45f986cf6fbc4af0e177909c6672bece01b81cf95400b5748e8436cf14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-sass-loader-orbit-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299b64b0af89711f6ace77bd2eb74ec7ee22b886558ad7c24f690a3b16389dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-chromedriver-typeorm-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65121db18f2f842924287b69d612aae8a58a24bd12897bdb16520e989bedfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-yonder-convict-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5c5ec00308a06b9e932a7c73d0618dd1b9b6e1848c2e94c2472b36c9395c0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-hexo-xml-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c816af0f803870e47672c841645b4a3a9fe5a554904a699390f8a94b5555ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-mensa-callback-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5c4af59ccdf081d321a6234c0e30dc04ed83eeaf768d85866f80c9b81d02f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-fusion-chariklo-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99b8a29edbf68f38fa93c36114a7188b726f9e453a14c9ec6da28db44f7f94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-publish-triton-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6da7d536d49d9daf39fe95ae30e1ec7a998c9b6d31b5d6d0eb19aebc51203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...