MAL-2025-154309 Malicious code in dia-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd0769cac0a842fd220e0e01e01faa7f8cc1e51330080a63eb0b94900f5bc3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141692 Malicious code in dorado-local-dotenv-safe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d65cf7abaf0a3cc4bc9be9d18b01ff806f8e740363dee4a0772a1daa3691af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147236 Malicious code in release-it-tailwindcss-pyxis-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c7fb83cb976f0a3f94a4a1e3c7d374d787061d36463088b0c416549d24f944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-query-solis-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5301daf1daa78d604ee8ba02569eb891ebb10eea2b07d08eccbcaeac24c949a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-donat57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b207ca976c023aef752f92873107ab9c1bf0d272e91c3807609d72982d34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78850 Malicious code in ida-gepuk2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91997c422ddd6e9a2de649d086aeaeb8f40509a702c81eacce6531873964c705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79008 Malicious code in irma-botok65-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982080c1e9ddf96fb59e2969a7df7828e6631ff12e37a1a267fd5476a0fd16eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70930 Malicious code in successful-red-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad096b59b7d074fe4600e5c013a271dc5d7725fb62d063f5e3d23ae00a5473f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lumpur14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2099fa6585919778cd1df8d8820eee9140334a2d73a219861eeca1d42b4d3beb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58135 Malicious code in patria-otak-otak18-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46e0c76f86599987ef8d84b3a6ce70f79a936b753aabbfa81916a07ffd8c9605 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-50865 Malicious code in arif-ongol-ongol10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b08830a66f49a108646ff4c105feb6f1e6c378b671c9126b9731e4551b5d971 The package arif-ongol-ongol10-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-52467 Malicious code in tomi-naget4-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439b4e0b488be60d5686a5e74627968617441fc29dea6d1f6ac5c72f5c627ff3 The package tomi-naget4-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

Malicious code in erwin-lutis55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fc70415c7e518a90aed2be272a6c72fa5e1ef9dc9d5a72ebc97579305d4bce3 The package erwin-lutis55-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-51493 Malicious code in dewanto-ongol-ongol32-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1d76c7e74f851b0bad23c37516ce6720674499d45f1df270fc65d989c9e6034 The package dewanto-ongol-ongol32-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign...