MAL-2025-152025 Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke121 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491cff21f8ce0311879a1be5c12447043e7cad8dbdd82b08d85e56e2c94cb98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153901 Malicious code in bitha-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02782fc23cebb0ff239fd6782e5cde8a44198a711c3667f6bfc39a80dc4de87c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169154 Malicious code in trevora-cir102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b17ede89ba3a457a0e5602e7cb00cd60f7fdabfd77daffe70f7db89ce6ff9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163239 Malicious code in nokire-nana81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf24d0e60fda3d8157c88262356d75dc38c74dad42253e7bc39557f0b2d20c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156497 Malicious code in infi-gafob-jagoitaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b3b6aa02cb61c4b69445182762e7a2605243cd5c507b0ad575f266bf7c1465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161525 Malicious code in nabuf-otmbian-iagssfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f24031bd601e736960122aaa1038c030824b2109f83beca84319db1bb78345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169452 Malicious code in uafagarug-musafie-dtut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9653e6b73518f425c6f27153e32f9bb6ee6e0b261450466c8bc22246f6270e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167676 Malicious code in teagood-namakai23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 489b0991049558a38fe48cde21218a8fb29098d2ac05e48c81a94d60f45f03b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166246 Malicious code in sunden-diak-itarukinyuia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b421830c2c3a95d2aff12ae248b60e946cb8336699fdbcf25fe059bd62e7c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161089 Malicious code in mutaus-manis-nubliw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659a3e885e158cd2ddf4b486010e415fa703bfc042c701b952d1816f44397c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159764 Malicious code in mansila-iala-maonldauai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368e5fc3daf142e244a356cf2b0818145e6c585647e682c70b26d4547feaa70e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145257 Malicious code in mysql-optimize-css-assets-webpack-plugin-castor-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 550ccf08e3abaf7c172df12d438802d720d26d8c19209ea20c654059b77bd0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-meissa-europa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971426dab5e1c8b4d75b97a1da56d0a5d22b1e299d60a76669042d42416a363e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4741cab512695c1c5578f08e6536747101c2e0fff2151fbfe86c9ec962f7f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

Malicious code in charon-lint-envconfig-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6900600a2f703e91fffd3e91cbfe8399ad28bfb5056b5c9925357edbde21f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...