MAL-2025-160742 Malicious code in muda-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19059fc2c4097d63531eae0373e42c85b5332956277bf0b492afeba328e4f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156876 Malicious code in iqbal-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b571f9f691b63bfb45cf30941356cec81d0637309dd3e671a514a031d84721f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159537 Malicious code in manaf-marzuksi-majaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9f911fd3276a4c234c5cf778ddbe4637aaa276e1d160072ccd94bb6a55d754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afoaiagi-fag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2dcebe5f988fd059e2b888c56a8e4dfcca403a4ae823b771f5b8464fb3fd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164700 Malicious code in rino-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4938a981801fbb9fe502551519687324a416774b96d8dc83c85349b04582bdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165967 Malicious code in siregar-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b3f543200123d69ec4385c195dd7a0bffc8aabbc0a98e3f1f62e07201e4202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152180 Malicious code in akanabi-aibia-ubau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f34328f810f3110d3f97a073bc0db3f75e856e9378a09d45d4073d6b4925c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161919 Malicious code in nasrul-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78f6223726429ef764f92690e632c367291c5eabb792b710ecba598625db2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160492 Malicious code in miracle-dibook-ikukanuanamai1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b79ee45f486706661d52160c3d38a2a2a66c21985e24b53f8e25aa8a355bcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152110 Malicious code in aji-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df14e4aa6aed135d0a26c74e249920ea76bba4084aea5a551ea4813e14185b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-rocket-vuepress-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92eb8e6b2794182f84ca60ac2dd4533e6e10d51086559a89fad109487b8f4d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-dorado-halley-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd77d58a1e5eb06d335b824c723bba81e37cef46ddefa88e94c9bd1ef938523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-magellan-buffer-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19433513be4ae22b3df0ed3f88b8b07c85bfb541265eb392bc91c89d720368c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144096 Malicious code in karma-centauri-nodejs-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbea0749066ed1590c1aef758933c3c7852e36e96cd4693c167a1910e082d2c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146698 Malicious code in protractor-sagitta-xenos-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375ff0f14b90d3c243abb0c7b21bce0800591a64aa75e666438289eda3647e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148303 Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145865 Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa5e7c9dc3d753d65b3a92dae95e45ef42619f35d4b3c87f3f5db8bc96069e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149609 Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...