MAL-2025-166233 Malicious code in suharta-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adf5349c3617cb10b65df1d736d4d2c5cc5865c2241ff9fbef0404baa28dfdcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157434 Malicious code in kapai-safma-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421302c98ce5734454310a67c073d347d9a28437d13a430f92bcbcf20a2d4401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164975 Malicious code in rita-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9508b9a417471b3af8ded6f50a1f7e97c2d9ca74d1b7234a0421a7c1f8b22fed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c73abe2677c0f4a34d74b7d78caad46b26bcdeec6d8394a17280a177453a8383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd7fb75efbc637f36190ff59be2616a744c68e52c116f2ee378ec29fbcfa0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8c4ef79819928acbc765b0e013e77727aa5ef1319bda94a1174eeb34774885b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168449 Malicious code in tealove-nanami20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee19211fce23f4c8f2479ee02e030bb0a0c15595a5af3e8f1a0c42b6ea2d168c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120122

Malicious code in yildun-config-electron-ophiuchus npm...

Malicious code in dactyl-prompts-mongodb-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88854fec77d48a538cc347316977da952252004b4553d23a50ebc2866099197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitizen-style-loader-ursa-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2ebc38705a078126552608b320280b5a60874c5f00b2dc23be6eef2c6a79e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-morgan-firebase-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de49136599990955a3c0b359d9c4a251b0580527ca7f3d59a73dc092f5ddc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-repository-parcel-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168dfe75d601a991ed88a1e2c0e94f4def5659781b663e517164c6fa7625a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc85defb5c47d81a6b7152dddb64836d50ee11205bac70928844a4534b6d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-harlequin-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f387bb00bb1f855b2251f68befac3df1e9861745d83b87d91db9950be633ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tomat40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566f53dd49ef03373a5cd1086153dd894bc2d0f4ef01a0cb16d8ff4030781690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132120 Malicious code in arif-saguer54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26b3eea24dd26793681dd4955cf76b2976b6f3cb9bb8b22aa158ceee83d3b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasicampur76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a62dba2080654e6074acf63d4d0db4a02ae1600ef323da5f63b586c2040d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kentang95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70e1fd5a3bf97d8f6e5f9430455a25a2a7bd2d1153d6c8f2af823d2775a9626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...