MAL-2025-153816 Malicious code in bitha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ad239355989beb71c1687573a36f917b6b9f74b5ffbc85f5a6079e4374241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155828 Malicious code in huda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df016ca6c111f993db1f946859e23f8dbaa89401339b8d05f059aa0378d79f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159437 Malicious code in manadsi-sfadia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516bdb5d4330cc38d8670f74bc3c9f8101c092207ca75d897a5a517e7b66f49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164130 Malicious code in pilka-kalima-vubiucb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffa2ea14cb65a4b8d79770c148592a43fd0cd9f8376d29e651684b18e59a74a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169804 Malicious code in uinsu-lis-dingk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c43947da27ae8bb3f6f76112031188c99cc2b3bf8664ac2d1d9b3073611cf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154436 Malicious code in diago-klp-kabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077466943f59800867162d56aa8909f419004c29baec35e928da7140a1a3aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156199 Malicious code in ilal-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0629cebde072443ba1f443220dde9673b3150a80fe60f7daa4195ef71167501c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158370 Malicious code in lookingan-nakomi13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad992c5373804dfe918313c530e79b607268baba59d8652098d13354aabbd51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161175 Malicious code in mutsrio-muiko-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bd01d17c107cbd2be5f703db3bc6df70178f65fc39b0cd0af56feb0b8d0ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-toml-hexo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88ed96a99d8123b50e2099b8f10b6996f7722a4b30d1a99d82db83713193881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141452 Malicious code in dactyl-rate-limiter-janus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcdc160229f75ffd32cdde8f930e032a5f93e05005ed6ff121763b51a827da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141914 Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144902 Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...