Malicious code in alita-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f335ad573f78c77071d6558157344712ff252ab9ff436f3a05c79a3d84dae235 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168408 Malicious code in tealove-nameka26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dafa3baea5e8325ce4edb43e8ed928576d430739bd62ecb116cc7cc25ec3c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164701 Malicious code in rino-poke54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cd862a45e486e4db00f71aa4c7c24a4a3780f5e3193437843d46a10e884b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156938 Malicious code in ita-23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d348818a6346cf6dd0780e983e8115d2da08cf25d2e5ac98e9e3bbc35300339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162374 Malicious code in nokire-arhani6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299093028ce9d38bee79a6307a59bf6dc7238153b4a8b73759f1e594ae48edfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170396 Malicious code in verify-ayica-amali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2085d3d2aa4816a052b7e0a4f404c367bdafdbd859ea1bcd2e89482efd10747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153657 Malicious code in billa-101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dc56e7e0462f9b8d816f9fab45b6a5f4cdbc5883a99a0ea220059b78e3e0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152649 Malicious code in andriani-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368b4524fcdb4d298d78d38da1a9faafafb732f45843a793f083a42558c0603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169193 Malicious code in trevora-cir138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503831a3fe4b3f5bb1ccaa546ae045def12e9e048fc03788820f0c8c3838e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168329 Malicious code in tealove-lady23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f1f5c6bd916814ebe6d49c8676f4f4918953f02d6a2ff57b84d0dc3fec5a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-despina-ganymede-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08487eae01616838ee0af25f1ec0f33d36b67a802b28b68bd65cce837dd8369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112331

Malicious code in jabbah-loop-corvus-style-loader npm...

EUVD-2025-122925

Malicious code in quito-loop-scripts-event npm...

Malicious code in auth0-cygnus-farout-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in query-fornax-loop-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c267bf36498196cf97e6013a4a157ba965ddb10bf798d0ce5fe433650a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loop-quark-rimraf-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51cd66b65d2db1213f39eea53dd4603c5e7caac88c57ee60eaa8cc09dc337c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-child-process-zenith-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8ac52cf3de98dfb5eb57f3316ceac412304ef84753e297e90dc52e087dc974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-scorpius-xerxes-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fcf3ea9fcafd2dcd691e048a33ae8872e48097d9d1a615d8762e7bbaec02d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-transform-jest-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...