MAL-2025-168304 Malicious code in tealove-darknest46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04b2eca03fbda28c9c80ff19de4990ada10bdcb623fd9f60144a093688a53ad2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154824 Malicious code in ewa-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e82df51997c6e63bd28bddbed5d1bd18fc0d1d84308cd2487e276d482ccc06e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155220 Malicious code in fitrok-poke51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe48bfe776737723952884adbbabbb300423082624da44742278dc8783296cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157067 Malicious code in jimmy-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 432a75624c93af3bf7d8a3b5d5a312adb7f4b40b303596bad643ded926f0e3b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yonder-slides-hermes-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e63cecb4f67a5cae4d7754df39a7799fd4bef7fcc25844e5a7c576e1e31ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-meteor-hydra-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33770dfbac66ffcb26f1980fbf651debce846bbe4d0a6c950d36e990f3ca549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134826 Malicious code in kiki-rangi79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ac4f477bc770a67540efe597af9d7aa4719aacf3f3b99084c362de98f2a675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131826 Malicious code in zul-klanting85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e215d0802bed45ec813ef51d4fa72a51af24547a71c85dc1db77bf254c736b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-lepet55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c73b22d6906425b7111868ec6f5e172e2f39da269a08100e446fbc6f73653e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129215 Malicious code in oktafian-klanting92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aed1ed1936d72c40c76d56def9cbe23d213a34074af007cb5decd0a8c1463e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd3fb338ebfbcdd20382cc73107f940d3145ec527c3c75c32029693e76803ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125440 Malicious code in cindy-lumpur72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68c841b9914fb1420b90a85f7c06b756ff2911ec4e423945d72707f0d90f7b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128952 Malicious code in numerous_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3166ebf21a3243a712bb2c6b1a3266a4219448df05bbcc05cfd67478de55087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127927 Malicious code in kind_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68529646a921419a257d8f4dda66e3edb49bfead867c70497349203f6b5e2e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-telurtahu73-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 391f4e2de9dbbcf96a2a5a686d03eb224ebaa52174eda99d1bc3fb9c592fa98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115031 Malicious code in joko-lengko29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd951d72ffbf1818bb1f5f84d88710a2fd8e07167d522a90e03c9d94864c660f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118023 Malicious code in wawan-rawon1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de29b756e54aa7e9c55486eb6ef65903ebbac9a9d39940fe858ba210205e8f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...