MAL-2025-164435 Malicious code in polymedr-minus-buipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8093417e3c6e7c6b39ffe13e2d6b68cc437f3e3f7dd62c77b4848368ae95afe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168441 Malicious code in tealove-nanami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c6f2043256461201c942fd26e688413b0034ca1870fba4a04c99d7e239074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152804 Malicious code in arif-poke90 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71f1aac0ea150ef71bb8b209b8a4ed10264660615503f14a93481b35593302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158122 Malicious code in lina-poke39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79ba5eadfb5f67a225ce166df30d855e3cfdab1edc8f08139a6573004285c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156839 Malicious code in iqbal-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27ddf328076ffb09bd4e0082f5375eecc8c77949318409d449b4a39a65f267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160001 Malicious code in manuk-naai-agamiga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e68f7ed52093f24448664de8fb49e195df6c3caba2c763e8ab132ea431a814c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168114 Malicious code in tealove-boy1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddff40f67fdb3ee4288cd11a7cd112834c50d4a9c86380cc95affa7f6b60a8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152876 Malicious code in aril-73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a9b3244b32d2b1d13c373b9e29348ceff499dad128b5bbeee84e85079b3581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151903 Malicious code in aiboa-molpie-aram (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ea7c4ee9a1ab1b36e2847305af05603f11750f25bc70de0cdbb210bf4472ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161564 Malicious code in nabuf-otmbin-nuyasfgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60e74b9dbaa2fbd7f84b436d4138a7015168628e196df1d1e3c66f514a5e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152969 Malicious code in astia-alaki-malosiafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ac64439a50d8440da730233bb70368768377953dfdaa03f0aff695f5515f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157967 Malicious code in lala-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46f84be5c49ef51928dc727900a5908111c472d4ce2af9ecf299dd8126f8afd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afe659625c683b2bac25ff371c17bb6016e2c47fc03dd89440b7daea743e24bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da1da336dd77cd89cb44218e89717c86254a1d963cb305acf62f650a1d7b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-eclipse-mysql-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e1ee2fc463e47934604c30abeaa1ca76f73607788e0c7cbf0682047489e488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-miranda-socketio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec621e6726eab4c97228945d899750c0f1ad4ebfd72f119c1b2c51100b87228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-commitlint-config-angular-cypress-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27fabc8b6619c335527c49d2b8fcb85fddd7995173052888ec6ff565c9fedff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-iota-ini-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d84e7df4e12deb90e73422bbd310ea7db2e28cee2688e87284777d4daf57bad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-config-prompts-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416d76dab1ee5c855fec1bd08f77080762c427bf97170b08dc63dfcd76b77258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...