MAL-2025-164858 Malicious code in rinto-poke81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9bf6d6602dc2c737b3f060fecedc735b97d1b10563747bdcd87d69e02b619ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169184 Malicious code in trevora-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a52e2724bc58cfdcfb2af10a0771ec66c3fb59d892061d28d745bc49cac7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166987 Malicious code in teagood-lokina24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c657c576148dee0a6b1c5bf61abe7c11bafb38a4aa5fca56f6e865ac77172028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151544 Malicious code in abu-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3536025414b7c383c0eee603ebc226be2ee50a73d7fc5b381a1839ff247a8af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150522 Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162328 Malicious code in nokire-arhani18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea14f1053cdac0421a2997157bd7044af76582130ec27284b4db62ec97d86a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152838 Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164395 Malicious code in polymedarn-munitsat-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322e217c86307338f5b9e3a47d4f7c0ed4b8f0c756c58595c7ee1ef8a2891414 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154933 Malicious code in fadila-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420af1b41ab32d6e711bd692260570b52fae6d54b71c53c0d152045db69d133f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164773 Malicious code in rinto-poke119 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7ab788ccf7d030377efde3f8521f58044ffb1bb267a963a64170e3ac045c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-enceladus-cache-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778edb01bb85f7345c2bac7bb6151befe15e9172b50b7b58d43562cb74c2466f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongoose-firebase-local-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceadc074463bf36701cd49c234869395b1d563165730f2883014fd0532340a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-oberon-install-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d98c11b8e2be55ebd3072519b7f90b1d535d45c258b4361e0edd5ca4394d288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142755 Malicious code in gacrux-chromedriver-cosmiconfig-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882b9247107fb64a948c02c6d307448b291c19157e87e972e947643ece1623f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146872 Malicious code in pyxis-config-eslint-plugin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9039999becb8512da6baec8c9a9785c430ce5c276938dacaed4906dcbcde51d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145053 Malicious code in miranda-repository-adonis-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603d4b742f0b3f24eeee1437a14a2801933ddc0b97820f8c2340a117e1eba1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141895 Malicious code in electron-builder-aldebaran-betelgeuse-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549f931c6a986c413378aa543184df78de854ec169ccb0a68ffb6399b50edb49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144608 Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...