MAL-2025-168506 Malicious code in tealove-nice28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f927c9740d12804f853b61b444c9b6f5cd79995a22dff67f921cc4bee9c7714b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139973 Malicious code in betelgeuse-config-nuxtjs-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fbc9a2ccf5396c8390b337cdaf4eb71c4bf4f4e489939c1669648819f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135852 Malicious code in nurul-bubur21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3486c029731012f28e7816f0c2454f48afaa8db1624eb4c1343b97a6e5817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116237 Malicious code in okta-martabak40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6051da05c76ea638157b9165d3e7f7797ccb8195f8af7d46991332ca9fc518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-tongseng92-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d8059e3b70e8733854e7eaa6a1c9d636929b958454389fcc434488f987382b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2f24377f2118c1503aa7543fff2749457b3ae8e66abd96ab90c1067408e73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-ketoprak72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d06e8502df1dc8957dbc0907826d0b6cb44f082264c4a1b826c8969914bab2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93645 Malicious code in coming_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d291cf7d4756c61c03e70abf19d808df42a18d48a04e1fc4a3c71d423e32c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tumis6-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b228b01334776f1a7bd104c06c2046e116f077e206a193a22867256c9e29fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79223 Malicious code in joko-lumpur57-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836585785988e2270beca595a8913218b7d511eaeee16893176ad7c08d4c70f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-oblok60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4e96dfdfa09d951566fbe24b31885d56d8f9999bebae0ec12a6acd74eb488f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67547 Malicious code in critical-moccasin-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6a85905b3fb3ecf092d986a7cfa94fb7d196fc9f48549c7010104105511ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66710 Malicious code in agreeable-white-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb629059b91801d526b9fa1b24f0a92cbf1a1c9cd8d545af261caf98a2768820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...