MAL-2025-165022 Malicious code in rival-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe574775a6228071481c64a2a0908e479d4bb15d92f9681ab86f439a0fbab5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165067 Malicious code in rival-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d04b471ea753cf19c0ce99b9e790c8ed82a3b5c583945ca8664e68b4c8c7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165080 Malicious code in rival-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d394d63c9eee98f6c29f7c933adff89d5a921b18565bf2469029519851283bab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eb542962e1a0df86e97d5fd5dd797c654889d6d56198fe02e7727fa91dea791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e3fe6d5c7becbe849008fef97b63720a25f452ef5604a1f67cab4a958bf79f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec48c50ca31c85f984a5ecf9de612a6f8432473138947e0248d2e80caccd2d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe574775a6228071481c64a2a0908e479d4bb15d92f9681ab86f439a0fbab5c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68687e6d618a103320be8791d6899ba7679b4e0505a3c43d2ac1fd657505266c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e481cb454a03564fd73b0287ba48015766979df22dad588a6831a7bf927163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165079 Malicious code in rival-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacb8eccc95e35791118f6b4145807e3a6deaa6e68e78a23431c91e4b6fe6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165029 Malicious code in rival-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0777f156eb79b8ffa1eaccd4dbdfd83077430c81a130e7a0c5acf6e5a148065b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165009 Malicious code in rival-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9739a6615938c9459b8bee8ef0fb44190afb1147c052afa317ce7ca3c2198bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival-poke102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130ab72a5ab5874879f43d83d4b6470c5964dcbc6edbccf34aac542e98eb8faf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165012 Malicious code in rival-poke30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e5edc4afeef07416d15181f30834672c007f7461f59f6241c2faeb8810d4c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117119

Malicious code in rival-violet-junglefowl npm...

EUVD-2025-102465

Malicious code in rivalnightingalez3n npm...

EUVD-2025-95263

Malicious code in rivalhornetz3n npm...

Malicious code in rival_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b6ce00fda0ea0db147296236274e588b4175e845035a85632f9c48c286f4b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-95262

Malicious code in rivalpigz3n npm...

Malicious code in rival_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6564941aa69a85bdcf4655171728c81631666eb9858e8335434f306cfb629a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...