MAL-2025-166233 Malicious code in suharta-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf5349c3617cb10b65df1d736d4d2c5cc5865c2241ff9fbef0404baa28dfdcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c4ef79819928acbc765b0e013e77727aa5ef1319bda94a1174eeb34774885b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153133 Malicious code in avminah-fagimas-ofisugooagafag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb81634debd98ee5ccb53dd1c8dc99f43a93e4dc3744255f5631b0e355bc8d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-repository-parcel-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168dfe75d601a991ed88a1e2c0e94f4def5659781b663e517164c6fa7625a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120122

Malicious code in yildun-config-electron-ophiuchus npm...

Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-prompts-mongodb-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88854fec77d48a538cc347316977da952252004b4553d23a50ebc2866099197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc85defb5c47d81a6b7152dddb64836d50ee11205bac70928844a4534b6d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-morgan-firebase-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de49136599990955a3c0b359d9c4a251b0580527ca7f3d59a73dc092f5ddc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-harlequin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387bb00bb1f855b2251f68befac3df1e9861745d83b87d91db9950be633ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132120 Malicious code in arif-saguer54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b3eea24dd26793681dd4955cf76b2976b6f3cb9bb8b22aa158ceee83d3b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tomat40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566f53dd49ef03373a5cd1086153dd894bc2d0f4ef01a0cb16d8ff4030781690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rangginang97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dcd7d0a5ae2153f23308f4ccbbc355f687799871d07e065d58c503d492f21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasicampur76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a62dba2080654e6074acf63d4d0db4a02ae1600ef323da5f63b586c2040d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-saguer16-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416eed654a1aef465c1b5d11d8a29594a499e477c1654a75e22441b4888f6f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kentang95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70e1fd5a3bf97d8f6e5f9430455a25a2a7bd2d1153d6c8f2af823d2775a9626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128449 Malicious code in mahesa-lapis48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f2a5574ae6581493491efb534d39fd93a750c3f9427e17f88dec9777af4beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...