MAL-2025-148231 Malicious code in sqlite-loopback-iota-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3537583281260542aec1d181c825c2b58be90fd7d1ec1ec19952d1f37150fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-less-loader-arcturus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6e1072bcbf34a26a737492c8f7efbbd727ffc3bcc97fd86acda93abc6b9608d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142942 Malicious code in global-loglevel-lacerta-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145146 Malicious code in mongoose-andromeda-janus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a74582e07ba3cac3a682590877158bd44f994397731036233950c92b4b26f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-wezen-lyra-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450068822056068b604068dec0e14016de47c0253fe0686f74ea7a0f9c9adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140440 Malicious code in carpo-frontend-callback-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322ec4015b6527aab0c3603af097b5868aa95270eef43729041f984b436f921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134761 Malicious code in joni-soto20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28949e01b381ba41d8f229ea329e081b22d5978c1c0d96c6644528446a44ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135525 Malicious code in maya-miebogor44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2ddd411446bd85385834926ed97f5d372e12e6525056f2bbc51a0a132de29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ongol-ongol44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf4118ac5f5adc3afb23a01d5375afc7769d7e7d48991a738a6c2c9f82c3188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134602 Malicious code in joko-getas53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072ed5f7776db16207da5db1109dac1b6c20b52f1f5c2dd956dc26305f0b285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137607 Malicious code in unusual_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f6285759814365a9b9b98b7654416a8b200884111da192a44ef93ba085c3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135469 Malicious code in maman-peyek21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0907458b071738bcf54fb664c2d43ed322b0af1ab876cd7b69e4559fdb4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134376 Malicious code in international_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bbe09a5563f25eb65c8b947a3697c781481d61409a145cbc4dca5a009e2537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133478 Malicious code in fauzi-wajit59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2f3e1ee474e836b3016759e51716118c8076127387dbfa34cbc772fd9c69f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136438 Malicious code in putri-ronde91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6777fe78fddfa2a8bb9e62de1a3c9e767e3656b9e50e68e9b236241e51fa8399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a005e9958eef9607110c0f64f54308d849c23afc03d853599a86c31ecb1078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134874 Malicious code in kresna-kacang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8badb8571149901c3ce8970d43df45a32fa04379f89d9e0f9bc56f7d13699659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132198 Malicious code in basic_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0da4913a632950b0d0105d201d3cf2a94d459a34ee81b1f7027e433372a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138022 Malicious code in wibowo-bakwan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f928a4d2b8811a27256846cda3554fbb4ddef2156d6ca39ac0b8f8fb11d9fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...