MAL-2025-154436 Malicious code in diago-klp-kabla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b077466943f59800867162d56aa8909f419004c29baec35e928da7140a1a3aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157382 Malicious code in kamasada-nuyata-bunajda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68290cbfe2db97c3365f246ac59fc011a86da1d69016f3c783415f7d88cbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155828 Malicious code in huda-poke5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df016ca6c111f993db1f946859e23f8dbaa89401339b8d05f059aa0378d79f81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161175 Malicious code in mutsrio-muiko-muty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3bd01d17c107cbd2be5f703db3bc6df70178f65fc39b0cd0af56feb0b8d0ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154696 Malicious code in dioago-kamoli-aila (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0af68ca56fcac253020b03840bf8e420bb3c097e6014eaa8d1956d768219842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169804 Malicious code in uinsu-lis-dingk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c43947da27ae8bb3f6f76112031188c99cc2b3bf8664ac2d1d9b3073611cf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157848 Malicious code in kuinsu-uyilu-vilanuanakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf8f2ad04be0b7bccb85bf52bbae84211396bc5e7b7e563d0f7dc47f8216674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155700 Malicious code in hariyono-92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2625beb1ce2ec71fc1ab89722988804827f1551f02eecf3d796e4a273d4a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153816 Malicious code in bitha-21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3ad239355989beb71c1687573a36f917b6b9f74b5ffbc85f5a6079e4374241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-toml-hexo-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a88ed96a99d8123b50e2099b8f10b6996f7722a4b30d1a99d82db83713193881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141452 Malicious code in dactyl-rate-limiter-janus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06fcdc160229f75ffd32cdde8f930e032a5f93e05005ed6ff121763b51a827da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-google-markdownlint-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccbff0b4a9e34280a93c9e23366cd604820365283d000a1a98870a1d2f53f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-foundation-norma-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49315bb63638761a8dbd289a4cf8e22369803d71be237d59224742f28f2b071c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141914 Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-rate-limiter-terser-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be96c07650b670c76bd394a0fd674f3357b792a7afc500f19b9fefa6e8625b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147932 Malicious code in shelljs-warp-mongoose-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6018cc36beddcfdf04b6db21a67f004b60c11db09ff11b6a4015d3b06e4f15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...