MAL-2025-163642 Malicious code in nokire-zenitsu52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b999f1137b060662eef51888d173af26b8982e1b9684b86e97db0453e4f7fbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164858 Malicious code in rinto-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bf6d6602dc2c737b3f060fecedc735b97d1b10563747bdcd87d69e02b619ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161923 Malicious code in nasrul-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3ea35b5c01e6117b3230f3dcbda5935563e93e5d1663e4b23548cb563711073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168039 Malicious code in teagood-yakuza78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d38b5d0dead782ccf44819b33dcbf2ca90b70f2a29fdbb153aecc8047a8b489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa8d5a2b46272c9b37f7bb1ae39bdc67c9cdc0bce7869e12d7475598c1c93043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-manusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61266c0a988ee428742aa92fa2aafd01ea285481fcd6131db6670841cd9744c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/eriu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d40e483e962df7d89a6aefb16d193066298291c526c8bff037a123683201f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3ad59a9293962734cbc0e101eb00f2c2052e91dcf7192a8fb0a8de785bcc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3a37e717bdc29dd739d63db1d208a016065b5cd726929548d74514e3babcb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abi-alaufi-ayavauba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea28c341c2f5d406c4238b693df8660a0ecad0289b031852ab13263cd311282e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148262 Malicious code in start-avior-node-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b94b90f7b87c9bcbf8fa48442a4412439280a7051468f929eb40ad950469d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139995 Malicious code in betelgeuse-octans-venus-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571f015c46e84fa6fba8638064826f599bbdff229f5ad4a15ad7405eddb455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148963 Malicious code in uninstall-octans-procyon-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 974400de422e2a3fb0d03cf40d45a0476bca83b458b272e5638ed90165ed00e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147145 Malicious code in regulus-electron-builder-toml-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb363ff17fae4c8c782d0db9a96bc1aa2a403f59fa362575ea111d739766e891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144608 Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145053 Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146415 Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146173 Malicious code in phoebe-publish-gemini-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c346999cc24172ed14d568998d9240bf3ca1888626c6c643f1881bc8aba87b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149631 Malicious code in xanthus-middleware-sadr-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09af82f20b7a6de853595819e0521d588df0f7565fbf974821cc4b6309e5b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149127 Malicious code in venus-vuetify-regulus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e17cee68eb004e87c9a313b67a9f1a16ca7cd3689e90a42632fe0a3b8157b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...