MAL-2025-148189 Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147363 Malicious code in rest-rate-limiter-xanadu-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c30e78fac1e9a3f7fe1c7a1edd56dd8dd4ba3d954eae49fa7bf2dec37f7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141482 Malicious code in dagda-rate-limiter-webpack-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9db708a3dfc3a2df8e8c12f9f220aadbc59488cd39507f0da1c86bc814b40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147039 Malicious code in rate-limiter-hermes-eridanus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f0477fee44eef063dbf923c1cff622b1f8d7342d1bbf8a706c43e1a8d279d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116631

Malicious code in antd-yaml-rate-limiter-zenobia npm...

EUVD-2025-124518

Malicious code in nestjs-rate-limiter-css-loader-docusaurus npm...

EUVD-2025-120846

Malicious code in vega-bellatrix-rate-limiter-xenos npm...

EUVD-2025-113232

Malicious code in geckodriver-rate-limiter-iota-test npm...

Malicious code in rate-limiter-carina-despina-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d89afb49e1baf7114e84e9d0a8e776e8bd8a7494a4fcaa12145552f4ec4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115670

Malicious code in carpo-dione-telesto-rate-limiter npm...

Malicious code in loglevel-lynx-rate-limiter-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d7323270e59e13296ff1331364ed8cf765141361a3ac7614709d7f67298830 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122072

Malicious code in semantic-ui-leda-dependencies-rate-limiter npm...

EUVD-2025-122890

Malicious code in rate-limiter-bunyan-centaurus-native npm...

EUVD-2025-122864

Malicious code in react-bootstrap-envconfig-juno-rate-limiter npm...

Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-mira-test-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e4c2087053867386e2676432667509cc728c02281ab2bf11291ecf3ce2352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112851

Malicious code in helmet-rate-limiter-superagent-umbra npm...

EUVD-2025-122893

Malicious code in rate-limiter-ariel-slides-reveal-md npm...

EUVD-2025-116577

Malicious code in apollo-rate-limiter-hermes-atlas npm...

MAL-2025-144204 Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...