MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead-beige-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82f1bc8f94c4af627e49453ce228f8a52a22768038b9f66ef8865b0a3276be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult-orange-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7fc563a5ee0e2921e72af685639641d7b9cba9eaab7f13272f44a1f68d4cd5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138891 Malicious code in neat-yellow-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3807bdd8380fb48d62349f23f2a80eb31b662a12184b52c0503a76b0c3e1ef4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138689 Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-klanting77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a535e0e3cff2f1797935213d1baea8904bd7347526c6e18003284302ed3806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieaceh40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46da3abce478a74d9274e6a8757c43d662fd4fc69d6422cb516e24965f9e616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-mendut25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823f477a170edf193142e4bc9b03a5996525800c10ff1e84579533c539fd3162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b039b6ff80dd37d37bc6ed5dfa3812beb33b1704568aa7b3e40db8c336c8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-rujak96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a36504ecb1cb8e15142698625235595c9394211ff50ce8918cb1665feee395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ruwet20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70730229331fb9f3ccceaf106e3c0ef358f2db8af1909146dadb8c32472aa504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-jus22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6735da0bb63f702728090ff88be2bdd7dac6763a947993b9b6d00411dd629c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gandul100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5930c93e6e1359547d62d0d91f8bcc0fe4ca6f8c386b80211ccb11d2eeaea16b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-rangginang63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4fe15b515a03450ba272178c1c2b7eba4cfe5908e942d63eab690c24a747fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc27191c5b251d889bf8c0a82780a1378f78faf5cbb93efc9622b6d2e30875c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7e7f342d99517b587007eeeb021e70b8b6c682f5a2a01721b52ef6214bda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-rangginang34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a3016e628469365a5539ab79f59a9a5d973d8314c8e6bd00812c998203dead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...