MAL-2025-187425 Malicious code in ignite-configstore-morgan-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906d0c8e8c3c3b8deed98d2a4f08dad36cbf617d92d432626f92cb068681443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188199 Malicious code in nebula-dactyl-avior-thermosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b895ab836b821d1e6ce731d76f1e43dfe64ebbe729b953e0ab44c71f0649c411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188918 Malicious code in proxima-sequelize-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcfe00fd6afb92e1706c29463826fc87304a0c02b85c53af1d7e3625974591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-backend-rollup-asthenosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c75e945aecd446f0bba0ce1b9c53ec6e16c4e3159cd012093ef624baa26afa93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astam-ifst-digokianla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd16a56b50b1f97dd527d08b75e12a787dd5050a05fb735140ae5f052f098471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173884 Malicious code in diva-banbo-imungai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aad6680c5ff946f7ce7750ae1984e85c14f4aabc38f22d21d5213617c818652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sarasilva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c47901c1f446e1c4fdb3a4c784056c9b8e3a72fabe834bd92485354b1b91888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munya-mipta-munaro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cfff88bb13c34d837aa909c5d3511e0e2b8292e7d4294903aae6007d4468a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161047 Malicious code in musnisdr-nuyt-natud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2869c0e124ff9e2184ccad38cdcae25213cd3539899b4ee73aca5fadb1b6b2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161556 Malicious code in nabuf-otmbin-nuyaagfgitad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648d03b7a9527476cdd467950026273bf041fe037bcebf8305a18519f8d6dc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279f99d27791b4d1d89be9ce99016ed5fbff277b6731fcb2f61884c13025bdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8957414e6ace8bba37d8c9299be76aebdfead50a672299dd7954a2ce06533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150354 Malicious code in @mipta19/dcde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20cec395afecf0f15fafb5f9db72d8edce8ec4d393d642efa4415fe82e15bb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164761 Malicious code in rinto-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad1942dd6eb446697cf571a0edd13fb6f72dcd180de6779cdc4e7e33b33a10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-cluster-epimetheus-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130453 Malicious code in tania-esdoger50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec03624bcff8838de430127dcec594edc4a95fcf06055c659d7cdb339e8fa1cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-papeda53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e1431990375b5e6c06024e88a52a50759a845f1d52ceaec618d2ea5b02874e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kembang88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4a82e73e03138de08d76cc9e31dee1e9df1b2539fde2cb2ca0539e540d551e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111352 Malicious code in ytterbic_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ebf995159bf59d6acb90806f0ed73c6d0c486b1a3dd5bffbfcd909b20b59aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...