MAL-2025-161175 Malicious code in mutsrio-muiko-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bd01d17c107cbd2be5f703db3bc6df70178f65fc39b0cd0af56feb0b8d0ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157848 Malicious code in kuinsu-uyilu-vilanuanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf8f2ad04be0b7bccb85bf52bbae84211396bc5e7b7e563d0f7dc47f8216674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157382 Malicious code in kamasada-nuyata-bunajda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68290cbfe2db97c3365f246ac59fc011a86da1d69016f3c783415f7d88cbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154436 Malicious code in diago-klp-kabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077466943f59800867162d56aa8909f419004c29baec35e928da7140a1a3aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159437 Malicious code in manadsi-sfadia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516bdb5d4330cc38d8670f74bc3c9f8101c092207ca75d897a5a517e7b66f49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169804 Malicious code in uinsu-lis-dingk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c43947da27ae8bb3f6f76112031188c99cc2b3bf8664ac2d1d9b3073611cf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156199 Malicious code in ilal-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0629cebde072443ba1f443220dde9673b3150a80fe60f7daa4195ef71167501c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153816 Malicious code in bitha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ad239355989beb71c1687573a36f917b6b9f74b5ffbc85f5a6079e4374241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164130 Malicious code in pilka-kalima-vubiucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2ea14cb65a4b8d79770c148592a43fd0cd9f8376d29e651684b18e59a74a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-toml-hexo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88ed96a99d8123b50e2099b8f10b6996f7722a4b30d1a99d82db83713193881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141452 Malicious code in dactyl-rate-limiter-janus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcdc160229f75ffd32cdde8f930e032a5f93e05005ed6ff121763b51a827da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144902 Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...