MAL-2025-165070 Malicious code in rival-poke83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836eec76a87857964afc594f73124a03b6e005882aff9ac1a2bfc78c5ec9167b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166750 Malicious code in teaa-reborn7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aade9e0c06085073c445433c6653594832fee4dd4b0291c91e41e8144abe001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151107 Malicious code in abeh-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa55bae5f9b8810363c5324c43a0a5288f587e076331e1dfb0733088194360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154026 Malicious code in carv-nutr-sdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f5efb54dffe3e8093211f6623f4e521fa3a1e350723479eef0780fd6b86ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-winston-callisto-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf272c98e5a3824de3e534e3d0a63eb805e741d778b1de6da4cc3ece2aebba1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-venus-oauth-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12768900fb6531d21a6c7d38c5d1cdbfe8e4317e241ff500685713b38f7aafe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141815 Malicious code in duplex-lyra-ganymede-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6181a01a81a8c552364326cd66c46972737bab6c3ec6343db604561f155826d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148875 Malicious code in uglify-js-nestjs-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147850 Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145746 Malicious code in oberon-firebase-tailwindcss-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b4bc7293b4441705b10fc8300be3548ba87a6e1cf77108092d35b78ca23861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tomat100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c462245120b2128df4b9985cd0bf274313a03af545cb6a3a2f5a0846aefc489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ubi60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300634a424d576887fdc8b3a032542c5747c834edf794150301865f0e0e135d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-martabak100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186d6caadc907232734aecdec0dcbfae69469376a4dd92ecec06e9910689dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132510 Malicious code in cindy-tempe71-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82caf5598532e975bec56e352f90057626226c5e6df441f38af5a22aa0094bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135456 Malicious code in maman-nasi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07b1767d54cc8ee96cc3b6d42698d3913b8d30bf3b850a08c1b7cfda7751704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-gaplek17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b2c08b42c5a5c713b4f10bb6d760eda3d983551715226ffe8e2ce2de7bb1fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bubursumsum90-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd185fe2047b69895109f3bec0adefd9a301be4b15786c397dd884e059ff427 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-jamblang94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f1122eb561d57fb8546040552bd9b63ac2eaf6dbaea41d091d062f591c33a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127257 Malicious code in hushed_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8d940f82d110eb7d383f7e6442e0efcde68c1b1fc839c9854bf9c76e7eed22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131546 Malicious code in yanti-mieaceh65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae144bb1f7263c2c85f470ae90c41f0d8d254295f5c0eeced4bd7fac86dc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...