MAL-2025-149120 Malicious code in venus-request-loglevel-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628ad922bdf929ddebb5c4e0f9679a98b148d988f858aee6e97267b60eb8ee26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139843 Malicious code in axios-vulcan-alphard-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca1e8b0aa7faadd1ea8a4ce8af230ea758e09ae252e3adbd033961f243ee51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0665eff58f93fa7d6872ee7f7296767348a385c2537c8f02e446bb59215872ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138980 Malicious code in responsible-harlequin-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00748c3d2042e9b9898bd60ffeca3a9aac108a888ce82ab243cb07f27cdeed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in particular-amethyst-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32425cce44cc8ff232965905d82eddec12403be80b8d811019ff6b7ac5bb65bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy-silver-reptile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa82b813c7e2f7ff59f68cfbde294487ed049675eeee4ba335438e9bff54088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139106 Malicious code in voiceless-white-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f7f9174de86f57f60186b94ec084506aecdba7fd0c254523d7d5ae231a821e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-rujak7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae0b3f25db6c72ce568251b7afb65ad80f2b8a1d494c5d5af08d87b036fd54a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-ruwet94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d898d23692109e4f4533aaa876fe69f0a3d9eee1bace45bd01532322f949cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c7f11a629df24c80984c1c314dfbb84e42f70d5e07c62c2ce90240eab8f8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-lengko43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b828cd782eae165da3fbd68f1d1fef0d1ba1385ac1458329cbdf1087890ab99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-lupis42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab731658c5dc8b8db6b1fc9fff255595ce0147c80b79c61d467f0c2c6ad758d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-moci50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f51b6b33f04661ecc7e041f4707df7f15f20ee2adb5f78b64e6911bd56deddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-taiwan38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45fb3c3caf6168e01329128a4f107334f4ba9b3d8864044ba8eec4e9fcfceb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133244 Malicious code in erwin-tempe1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7c1693a871d4734ffba1016db31578f393a7d5cc00e354c57488b69ba49483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138481 Malicious code in zaki-moci25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e39706a508524c65190216211d21684887d215e85d14ff97cee3ce15edd896a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132697 Malicious code in dewanto-buburayam13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5c6ee5dc41f34497e966955d54012f8443b1855b3862a541d0b9412fccf04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136140 Malicious code in opposite_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc987bde819d69d3b60fbf504dbe6a2fd10c97ad31715b7af6b7af32cab913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133601 Malicious code in front_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ca3c48dbf58152b560739836dd31f8d5d3d78ea51f0798e756fbb9e79d54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135008 Malicious code in kurniawan-kupang36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d8c337ed5ad19edce38e2c02a97cb187c1953e90a3421bc814f8273e0cc807e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...