MAL-2025-169700 Malicious code in ucok-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c3f23bc9b8dfcc4cac518721eb9ee2493fc97328a32cab433bfb1c1ad8004c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc91551e06cd18229b49265ca5b529c19463ec28b8164de37ef5b660b7147b29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f659955f444df90be1d20bd91132379daddc1c59b1c9f97b5a6e6d1ec6973e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159728 Malicious code in mansia-nonatai-amutgiag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d9a2786d81f73bca3fdae863751f572cfe334b619c01ab9871a593f52b677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-jovian-hugo-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c6f6096489737ed111c3532cb37fcda467209476821719e723cde5cead77cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-version-standard-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590520d16eddbdf943ab99cbcabc3f81869493185964f9727b048f57817baf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-wezen-lyra-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450068822056068b604068dec0e14016de47c0253fe0686f74ea7a0f9c9adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-procyon-norma-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a7b8a2c352bbf7bae65cdea75bbfb5e043e5d4200b05dbe0ac09a2a07df52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148231 Malicious code in sqlite-loopback-iota-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3537583281260542aec1d181c825c2b58be90fd7d1ec1ec19952d1f37150fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142942 Malicious code in global-loglevel-lacerta-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143131 Malicious code in halley-castor-less-loader-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d184b9279a477b2e66964b4dd26164f603b730d6da0b7938958256ac3ec68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145806 Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145146 Malicious code in mongoose-andromeda-janus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a74582e07ba3cac3a682590877158bd44f994397731036233950c92b4b26f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-impulse-event-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af0977a44abde184dbc3739dce64cfb2eb95d5e7cbccea10e59d54906046b6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140162 Malicious code in buffer-mutation-changelog-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e6b39bd12e70f7e32d3f9df10e9c2f4c51ba4b5212e46797a8d7d6c521b505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...