MAL-2025-153816 Malicious code in bitha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ad239355989beb71c1687573a36f917b6b9f74b5ffbc85f5a6079e4374241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154436 Malicious code in diago-klp-kabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077466943f59800867162d56aa8909f419004c29baec35e928da7140a1a3aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159437 Malicious code in manadsi-sfadia-maraida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516bdb5d4330cc38d8670f74bc3c9f8101c092207ca75d897a5a517e7b66f49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158370 Malicious code in lookingan-nakomi13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad992c5373804dfe918313c530e79b607268baba59d8652098d13354aabbd51c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157848 Malicious code in kuinsu-uyilu-vilanuanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf8f2ad04be0b7bccb85bf52bbae84211396bc5e7b7e563d0f7dc47f8216674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161175 Malicious code in mutsrio-muiko-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bd01d17c107cbd2be5f703db3bc6df70178f65fc39b0cd0af56feb0b8d0ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169804 Malicious code in uinsu-lis-dingk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c43947da27ae8bb3f6f76112031188c99cc2b3bf8664ac2d1d9b3073611cf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155700 Malicious code in hariyono-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2625beb1ce2ec71fc1ab89722988804827f1551f02eecf3d796e4a273d4a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156199 Malicious code in ilal-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0629cebde072443ba1f443220dde9673b3150a80fe60f7daa4195ef71167501c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-toml-hexo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88ed96a99d8123b50e2099b8f10b6996f7722a4b30d1a99d82db83713193881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144902 Malicious code in meteor-chalk-csrf-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0aba9b08ce2f5a603c22c08ef31c975f98a0baaed6e08c137c3888d64fac1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143327 Malicious code in hermes-spica-taurus-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1b431aa27cb794f183d676334d065bb20c5a5aa85ada442e41a3e2d0837ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...