MAL-2025-164790 Malicious code in rinto-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4aa2f0f0c08bc7080162f0348d6bd725922d1a01c77a491688d54fe9055b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166198 Malicious code in suharta-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2743cdc94066a07738dc0034a14de2fc6872817dff8f75c7880db5dcdb7213c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-relay-winston-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-apex-spawn-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71e0a1e9cf368723f79a82fb82524b86d059fa3abe85eee3b94013aad9171af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142040 Malicious code in enceladus-ursa-bootes-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3245fc3adbd9e9852df9a8e88db35cd0e9d70c380fd57dcb2a3c0dc2e340d6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-nextjs-antares-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d94ea4fddbfb6effbe5c8dc54b46b9cb52c22ec411b07f48aaa7352efd7d359d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145901 Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132645 Malicious code in creative_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafcb844605b06f601899b10bd9cd12666a592c38e0a1624b41c3f81a5bc2eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135667 Malicious code in nadia-gepuk14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4573f419d7bc2654d5bdc5f475e278d134d6fb83367600e0c430bcc21587824f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130000 Malicious code in rudi-tahu82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee46755080dcf65414f6071d8400f5db94c6fa03961e0a989a08b649ca94321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125143 Malicious code in bayu-sroto58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6788018ff64d6327037a5d11a5c0aa402ecbae245db164dd4491d41b82cd901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130484 Malicious code in tania-rujaksoto68-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 114a4f86285a9f8e640d1aa178640306004617439e2b238d9bd4e57a07d51415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mendut75-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4592d887f7af63f28911b1df32d74ead26fc2ab882962dd6bd8f4c7dd8b846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-sate95-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcf9ff5021af28f0d0bdedc2cf1eca42d52e6f91bb49ac6b2204a1228572240 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112367 Malicious code in successive_wildebeest_teal-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a25a61ea99b3470066b094387434b06a6107e7a0ca1976f82dd792472f76a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_dragonfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72e6a178c2d4d1321e075139d6420ef0487534a68a79ef5c5996d592de8331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pancake-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da94a2bd1f19d55d1d73a0e6c9838d352b38aca58bd7bf5382c069675807ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fc1fd42ed9464c8b61ec9abb8579a42b77e652e94ffa575ba10e6546772bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...