MAL-2025-157071 Malicious code in jimmy-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9867f620c1501f913e9b575a405786a0f92c3a6963325b4e765072ad1e66beff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162224 Malicious code in nokire-akaza13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e2300a1c249148e35de97024639597ada37aae64a06eacb064039c53ecf5017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150013 Malicious code in @mipta1/europe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2943caffbef124c0a7ed24afae129d6c2a79524ffeccffc5803ed15a7d2e1fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153883 Malicious code in bitha-82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 154274a91b069be4b696df8d1432cb83ae13d8208ab3ca28641f51f3d10fa604 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153197 Malicious code in avminah-fagmas-diewoggrg1aa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f94f3833294753eb03a54e2bda21201c26093e0ccb2c3997b3d71694be2efa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161580 Malicious code in nabuf-otogn-dofpohjau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f170985fe81dea3d1aba1cea0d6f7856f9bdb8734a73976e862b087e7baa14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161854 Malicious code in namase-mewel-baukmwmek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3265ab7e74f3a8e50eb2c8e761ae120da08e278bc2b0704d0e3c92962056727c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-xerxes-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab249f4b1186df6b683ff0bb6ef3da1840b0d65c1ff48b33fef2e5d9cec0feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-halley-nodejs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-castor-rate-limiter-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b8d5eadb862ab0380ce00e88203c061c6c85618af21748e2e962dd1ef25b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-child-process-link-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22975fc0b1cef30e326d92c69dd05052e47b7277630c2b57b0dcf5e1986f379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-aurora-mensa-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 314a9b30e500b1aa27850cd7078ace3a9ca58b62ef8ef1925f4b3e585475f6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-indus-chai-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a640f3907673006d43312fd214e58ae21c5fce51c501635b7586b270b94c1416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-postgres-dependencies-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71addd74e758be5d25bb8be52e25957c95a1b656fdc300b65271be507b432326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-wasat-octans-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd37a599738ca614b0f898d028c4734a08455a66fdabfb731354e0ffa6ecab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-charon-rigel-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6b81c14674542e9356c3817bc7e5d57607720d23252ff3006a97b314cf0b872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-yakutsk-juno-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7d8857f1269646d020d61a230349856e619bec10f9307c2ab5843d8f509f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149638 Malicious code in xanthus-stop-antares-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24aff18b7ebab6c38ebb608d171a38a0950de81bd26c3a9d4c476745990464a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141169 Malicious code in corvus-webdriver-manager-vulcan-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5135e94b844719cf58de133a7f391313a0e7400a94f34c8c5c86d4ec1814d2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147742 Malicious code in scripts-pino-event-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128e90a0f35a135ee0249d752b33a18aaea7dba4c4b0e42facd5a5fc7438b978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...