MAL-2025-189144 Malicious code in rehype-mesosphere-orbit-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e28a6ef17ceb60bba6aa7f7aa38fe00aeb2d6a8cebd70653412a6507744772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in item-ati-zjzakuika (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcf309e4b52cb4ec9513ab77c6cdd449be30f5cb89337c53efa28605386c709 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175510 Malicious code in kiki-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0820e8a22ea59755e86c4e8fb644f54137560b622effb808a1f5fea0312daf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-kanjik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a23d648c36657f4e170497f1e517ab1e2b70111c1cfb3f51cc9d2a8d5980d90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166173 Malicious code in suharta-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae16fe6ddfd78f289d36c40cd4eb60f154d70e5c55072e84f0dde7968634115c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-empal43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e498ceebf8ea34e3d6ce66636acb3a91bc86192ae75e8c937b7e7d58563dff1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119749 Malicious code in erick-bika14-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e3f6af33075254849282196af7f3bd7bbd11e568a70396a5d8bc2da41f3263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful_wildebeest_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924ffccf79d313b79b31ca5307cc0db590b7028bc11431ab09a839f4558b75fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-teh88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a42fa321e6075abc9e1bc2aef7d222e7f9057b157bc04479f83ff59517cfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79485 Malicious code in kurnia-wajit49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6b551648951019407f54ff107d72d2fc312aa9e8bf53303e4a135333265dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing-copper-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70b49981a2bec4bd3899bed97b234685f28d4e2e5f170946aab7b679ed3c8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-martabak29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be056156d35ffe9c807846feb89b6b6f4a8dddd86723d91dc38f618df306c5f The package fajar-martabak29-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-51421 Malicious code in citra-mangut34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9157a95552e73f00c626cd5c3621484ef7139586e098ca8fa7cdce317838af The package citra-mangut34-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...