MAL-2025-165172 Malicious code in riyanto-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22ea2ec0604f0cc1281e3a624b9e515262133fe707024505b968459455105a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163269 Malicious code in nokire-nanali18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a886ba5ce357a847dae3e26f3fd0e051eb71058121b910aa34e692d2863ca407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymera-manuyat-peddaat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924518857cf8ba50fc26e0779b66102b0118a24f2a79533167e45ce9c0d3a7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nakomi42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451086acb775f5928b08e0a9ee72279af58f417d08d54cc939f0876a2744212c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112956

Malicious code in halley-mysql-server-sync npm...

Malicious code in levels-yaml-build-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894adbcc9f4739bb639ca7e40464f004fc072698d0e1f78d208a3e9b8d3da697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-websockets-child-process-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd862db44f15783dc21c6573311ec73ab09a2f68e999308370e492454719c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146618 Malicious code in procyon-test-dactyl-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa92a6112015e2ca4da64b0b94ae2b75baf7c651a407943d4d21741a0f4a71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147152 Malicious code in regulus-nextjs-chariklo-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d37f8e254bb80afe443dd1f2073de683b7d930ca6ecc89c98dab8633f4cf6142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149898 Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139273 Malicious code in aldebaran-electron-builder-subscription-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abc784a8bf74e36e8288aef1dd04e6dec28384acd38f24ddb4017757aebd310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145201 Malicious code in mui-elektra-norma-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519f58c763267fd10612636f7ff1074708c720a4a44fdd372714d5fe9a7cc783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious-pink-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca66cba7a49e0510546cf9b5ea945ee6b4d7739adb038423cc8b23b1e01c981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28c3d6ad0dc65f72c6bbffe017757db83b568ff28eef514d011a727633e9d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-rujaksoto28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3065d3ad0545e13c8b7edc0854cd4bcd967c6c145dffeb9e72e2ed23dfeb84e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84ea671934d4935f63462e233b16c3968cbd95f6b6a5c8d6fbfdc2c0a3615cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132240 Malicious code in bella-asinan100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49c15dc564aa3452be5c1bf520231e359fd91b54318ba02ead489997936e0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135232 Malicious code in lisa-kupat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078086aec213dd7b3ffa8c1a11fe2c9d60551fdb2a3c5e4e5d7159e08dfbde84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rujaksoto3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac7cdf69e7b65b92d6455538819a6cd307dadda9c5ca1cc18d67bb41a11a25f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-peyek65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b36c3b0a29a5ad8eab0a3d140164c456bfa88de369e26bab874705c704f8ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...