MAL-2025-168710 Malicious code in tealove-reborn34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4329f9dc067a6adb6679ad02b30de4ea0c99eb84289917bc2b53b566df285410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154786 Malicious code in ewa-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 589957c0b687fea40bab62d6652c24552314d788d49a22c71ef97eeb2450ab25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165638 Malicious code in saku-aimau-uunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e274cd665fe167ab867976105333eeb03138560c9114165cbae78e7d2c0e835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165793 Malicious code in sau-nakio-ups0iek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545695670068b2dc4f419ee988c846d04618173ec30a169d9e1a4830fff009e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158007 Malicious code in layla-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b0652e1563b227b1822d4fff020992bae859e66422f4975fa3f112b87c9461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168642 Malicious code in tealove-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdf1542e5e0afe5c49e170d9bcd5272a4d8bf44a12d34c33ad1e0557928dfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169285 Malicious code in trevora-cir86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5541255bc73f90fc43cccc57335d2a31f3ff22f796c5d16ba09839492d6051f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-dione-helmet-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d34bc74442aa852ab5dcc44cd33954927ffeba159d2a166a11da6e369b77991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanthus-express-prettier-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3469381f893205a4b4ef707f791d019e2f28b71355022db771346399290b307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-chalk-commitlint-config-angular-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab9e2517173fa6fcef963c83bc68703e62edc8fc55653176a6511b2269aaa36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-react-bootstrap-dependencies-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353beecfdeb4819086c6f961d70183613dc65b776ff461dbf29613f8ab84a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-development-deneb-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82414a4bc96098b86bd55579ab7fe398c1e9f770aae7802ddb2a096f2dbfea1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-markdown-pdf-jovian-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a5d051ed94e1c11e66965e997986b3294338b4d7ffffc9246f8156b5ac1adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-meissa-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d8a7b6e669481fa904e09e533347207b654c2c73dafbc0f436908439741150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-quito-spectron-webdriver-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ab05c0abe59e44166b054374c43449336ba83fe938e39d8214b4c678b52ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-express-await-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15ea7d041f0cca0b7a08d87fd49356fb4638b151a0afb8bf2cbd8192a6f6718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-impulse-webdriverio-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a4d663cc2df1cbf1299f2e5768e87b102d9f8ed51c2a21762524f1959577dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-grunt-sass-loader-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0610d438cfeeac5446fc5869435a197100dedbc6fdb810df97d1eb3706ee54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oberon-sadr-stream-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340278f68496efeadd003e04f84c930a752735bb8c48821c11ab92fb0fb0c98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...