MAL-2025-164979 Malicious code in rival-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281c09e6b1a332c13ffad742716d342047b3d15141bc551c2cdb6f0fb7d84a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168564 Malicious code in tealove-nokire35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fe0cde285e6f2d81c10cc6053a7d73f7555e2519068d30fb36306edba8fc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1747b3e4ff61af9fe5be7ac0e16e86d18b1fcff80d0fc0c017b761b94eb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ff745a5cce33f4e3467eab35f48bed3165f8bcd6c6bb5e6c7f006a81e5507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151793 Malicious code in aiboa-milipe-apmumpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4366381352d7b9f7f1e351d6efe48bfcbb33567d0592b0fad5fe4daeea90c29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151856 Malicious code in aiboa-molipe-aramia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6514fcf87f3d40d0b43ace4f8b1a2925e43b88f5552aaaebabbe780bd06b13e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152787 Malicious code in arif-poke75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889a0d2105ad2225b5583469750198a2605b467e2e554c5b18d4ad616be2b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151574 Malicious code in abuh-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d755cbb000e8c748d4a21bbed1dc4797948596f8229650aa4d5aec429a3704e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156820 Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166557 Malicious code in syahlan-poke56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a28a9c327eeca8aeb99a6db2bc281e80e4b803fa081823861ee8f2594a22495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-pino-loop-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b3b852e1f3038c98d784c5e0f10bcd609953ec9ebb113fca071dff047de237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-triton-parcel-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8372b0b0a4a35d0ca5d0bee3fc0d38c81f4d15095069255d4921454a2bfb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-algol-jwt-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbfd639c290016964d28a4e4d3975f56f9bde2c430129df5be23d9169a6700be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145293 Malicious code in native-puppeteer-sagitta-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc702e7575891810cd4a5ab2a9525d3febdae7b77ac6c98e96db321068d74f06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142854 Malicious code in gatsby-vulcan-lacerta-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ee152af5e0dcc5068bfc21b3ba72197064d1a82c2e97851c04f94b589799f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141871 Malicious code in elara-css-loader-tool-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fcfdab25bdd37fdc86ad0a8ca819d6a524ddae94fca9e2727215f631b725a84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...