MAL-2025-164237 Malicious code in piluka-kaali-bicupaibai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d755a57bd465d0eef84ed248a0b9b218517a7b37280cc19ddd04eb7533514ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166063 Malicious code in slamet-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf16dd72da2f5f664f006e4fb0241a3b8f30dd5fa82256f5b425a4a4f77f44fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164408 Malicious code in polymedarnan-nut-bantdadl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156f8d572b3b9fcf9e82d1221f51fc987acdcf23d910f0506c5377ddc44abe6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165637 Malicious code in saku-aimau-upunmio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f461136313998aea87774c3744aa554e2e7b8ebda5a06268d8e588cc2b33506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in triton-cosmos-await-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32003048b64cbf0ba382212601b68989e55369fd2e497056999091ee16297a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-cluster-firebase-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a574e09921536b26617497090092b3d6990d9ca20f1c4fe86560fe0d938eaa0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-websockets-kastra-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a2f825d9a99d499cfee3bdc98a762a5ce61eaad687a5bb11c1f762337ea5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-karma-sync-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3aba52d0957eacf7f9cb58860dcaaebcd83e86487cc6f8cf730279da91a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-firebase-async-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa716ed80e114bef0b9b7b9d962f271faa21538c3e9d5b98a4731097134c33c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-transport-iota-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2344ee38fa070a53a841bad9565ace23b620ee3a3f80a0565f958d36b582ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-loglevel-luna-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c031d871b37a23d8446c98106ea76b2a0736e3734a7216e261fcd0f02781d40a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cressida-loopback-chromedriver-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a0af00cb0b9785b12adba41fa57c163bee087f98cf867dd44117cf472565a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-ini-sadr-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223fea25c7a829f0d18381828d10a6eb1ff9a51c1adb446e5f6fc74b31860fdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-nightmare-geckodriver-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9973ab631522b2696dda34c1e449efbcb9782facea5ef651159b5320ca7ea22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-umbra-eleventy-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17faa8855d7ed0dd8bab2618bf7a645f24228a6533ac85cfe665cd7182c915a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-terser-uglify-js-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72bca524c147bbb2c84bb99e0bf53400154dfe38d61b8b5fe6311f40c3c42645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-elektra-meteor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec321cc8d8a1cb04ceb61935280a6bf3e36c4d2762d39ecac3715152c646fce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139303 Malicious code in algol-pegasus-fornax-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cd56da85ad1b157c8aaf46467c5c42f3a7eea259284a48f2e7b04f0741baf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144324 Malicious code in less-loader-lint-staged-csv-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5d55c951ada331fef063866e007b0f287b55a26834b8345a1f0b2a9b4447d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...