MAL-2025-152007 Malicious code in air-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b0ff94da847e2f0638984c15fa443b25104d21a1614303d4a94136e17167cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163295 Malicious code in nokire-rara10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887be60a30e60062c849c026c1329bc54e027442bb8c428141b89548dd68076f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158519 Malicious code in lookingan-namakiki11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5eead674388335afbd96857711170fe909a0ce7c109474af61df20bdc7b7243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152864 Malicious code in aril-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1546b067c19f14ae96cac27fbd04209781b32c2db334eb6e13d74dc2caf6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154850 Malicious code in fadila-poke117 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17f2f2f906a42faa54558f44a256caf4ae27c4bdf0bf4c687622d684186db4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152139 Malicious code in akabia-aligama-aibava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820dc12081f8d7893b3b317bdaf42950650c80d8ce5ac8f54bd504fd0ed54a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in busy-chocolate-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fddb4341930456fcf26d397acec623f247a6d26b093fae7f227c7c4de79da790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140127 Malicious code in bright-jade-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca0b7a8fe76c790a8f0966c2d9b1b53750f83ee56f61e330272e75545da21e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149431 Malicious code in western-amaranth-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256fcefd037c6bcf57310c55d4eee222cb6a258399e8dfed1ee8e4c5ba6a1de7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_chipmunk_yellow-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50646c9f945000028a8fea3f69a5b46d49788cbacd85210cdf67ea39c0fd3658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148346 Malicious code in subjective-amber-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063159677dd77a60ed3c35f0cbe6cf08a1b4c1187df42866d6a13b33c6299862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147934 Malicious code in single-bronze-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1993b98413929213824f81f73e8468c2f37c023b391bc8ef47002f7fa7fcb289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-jasmine-frontend-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc5d365dcce5e2b678e7f28c3bd51608c01363800de40988c29530bfb10e1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-markdown-antares-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bea403516c121724c9d4a28b3fa6454abe86afda0da76546d5615ec9e091d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sync-wasat-deimos-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b928c8b1e23b0ca5a42a3df176fa0f9a12482797e409ce6bc09d1a8c0636ca86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-await-epimetheus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55f3198a2540c23b7469e15f06bd95fec082c5ff6af5c5fa7386896da555ad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-colors-luna-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65b83a8a8f1d5319787c1d0d1b3ea767eb09551ce70d39827fb603d439b225db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...