MAL-2025-165431 Malicious code in sabua-muyafig-budau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 267ebbe3ab9a0bad206bab8a6e5b33ba6a2b8bedc99285e7c6f88a5d43b0eea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150194 Malicious code in @mipta1/rzaedcx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42f01e2e35b99914181f526670ec5a1ded384a3b15c4e3d7e0c6ee80dec694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162054 Malicious code in nedarida-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0d62b94ccc695eeb637be495fa6435afd5982e509b0fa2c61c5da0eba94f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152433 Malicious code in alvino-72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71c9c23bb7ae2b18dae40a17a6944dec00f74a8019735d4458f84867e42e1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139416 Malicious code in antares-iota-grunt-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a774dfb8c1801bff6640839e466dffdf8f5fb9e3ddd4f4119baaf7c882cce8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142914 Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-relay-nightwatch-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbfc7dbd014955090a7ff9658944678f02935f0e7d86b417c54fbd53fdac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-nebula-playwright-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e1f1c5a4a1c55419ec29857d1e30fa3543b82900639e451034c7637c80e6af7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143734 Malicious code in iota-nightmare-sqlite-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ec0d84f8b659ba46ca42b475c6afd13b29eb92b96344233119c57a898822f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148968 Malicious code in uninstall-sadr-odin-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3129df2b2edc59326781977e3d8f02266f7c7198319ed2dcf322d62530d4e33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146255 Malicious code in pino-venus-markdownlint-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c04621dacd067130e824c714fe59657f902386c209fa4dd53cb3a8325a2af3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149016 Malicious code in upgrade-hermes-jovian-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f575ed011ba9abd16d381f3446768c3a2dd8a2a7158234bc708e00b833f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149059 Malicious code in ursa-juno-nodejs-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-papeda53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f66f888acfb21db9c6aad1e0ea5cd31e66ecd9d518a2314927541d469a26a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136363 Malicious code in putri-brongkos73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2a73c97a8b2c19fadf07b3e601bce023e0bf5621e3155d64a3d325a8593777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133804 Malicious code in gita-kue27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a87b46bd2848b47c74ea206f9cf43e507e0d52b8c96abcfd1a13cb4ca1f8e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-mieaceh49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49a86e5687aa479d5a0d68335dbb13c0f4d8f0ba312af661834a955ac1bdbf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129162 Malicious code in okta-kupat17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3575eb3df3c38eb0e78ee394208a7b52bc109ac92271d32302bea7073a37531e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126596 Malicious code in fitri-rawon20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4596175d3bdc248fd44868e37b421bc15ecf59fed251fe89c48bc6fd5b246706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...