MAL-2025-141708 Malicious code in dotenv-meissa-zephyr-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00577d92ac72c5b95e8696e92641bbf766e8fb2bfcf75a4be0fa409f93fe250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147350 Malicious code in rest-husky-aurora-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80331c1c8333af04e7c1870dc3eca41af5845de120b7bea8a8a466b66e0fad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140390 Malicious code in capella-kaus-global-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699839cc245a757edbe4e1980aff3716ed5cbb4f51e2786662d90515c8014ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149789 Malicious code in yaml-foundation-antares-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a67ec3a64d3a7650a12669ab6c5ae42927f3b82e08b118029fad105f67d844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149485 Malicious code in winston-changelog-dotenv-parse-variables-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07107ba7dcac3d1e832e3cf8b57b85c3fa17c4ebf3a3f8690276f30a26886d8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138660 Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tahu39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b6eb46c72a2e2c15f9c1efb9f917a66539c90994c90882ca740986647e0bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e6cb0119f0c6ba462cde7fce66fc0eb94276960ca8aef75b102c39a30aed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-getas72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1babcd9ee93bc5a876b99e914fc31b6e7f7d182426bbbb659b7ea0c7173746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lutis55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37335ad2162615004d4e0bca930338c8afcf1413ef047f0ea51e7a1a474ab913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mendoan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457f7679e0ff400144d45559e13ac02021506eb4deefc71ee0cee7cc20fd438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134417 Malicious code in irma-miebogor1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c3b834fbf4df96a282e8e1fb99512bf89d27db5fb3ed54ec3a16b6f0c769f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135269 Malicious code in literary_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180fabde6a565e68e6fafac8817628ae6978ac5754de5553a2af2bdc039a79ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15533b1e924a939ed90c071fc9359536b686baa216cdbf6f884e7434c1033a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137723 Malicious code in vera-ragi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed6d27f0b6a4a7594a384c567afef9ee96a0a5dd3808ea948a139cf90d13c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...