MAL-2025-146023 Malicious code in pegasus-cygnus-pegasus-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9e9ee80df78974cad76e4487df04300d02ecd7a6330a1aac8cca79884e5842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-dradag44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ce5bfcb9073cf1bbbedfa209582281ce3931fb500c9e6782a00c585d9b26c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ikan1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7a8cd669a4f7d4a158f3261347bdc8538f20df964b17e8781e37138336117d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-dodol60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282257beaacb1eb19b7ff5f4995bbbb354cd788ef5079ed4740c08db5376f14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136159 Malicious code in outstanding_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287019efdf7faec1ad2212d388951d2c63c90851fb0c5302bed2b2e88dd2325b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134834 Malicious code in kiki-serabi53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20bdea5873d23ce157105f7b0be2f599a14a69637b69b207b65f726b035f05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135441 Malicious code in maman-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae3ac614a1a9a3ffc55559e92e6f57525bcdc703543004f07fd26f57715792c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133115 Malicious code in erick-donat26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8e7755e62d20bb38f1c67fe27b05cb53a81a1d88ce1c899d7e3a2ab77e3968 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tongseng26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f005a8dda690b7a5b283e6e82ed5c4f620463e2cbf29277d870b648921b9629e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-sambel12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86392d8e63c8fa86d10f5ddf0fde82fc54a60c0bf49c4314c3ef8380024aad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gepuk49-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fa5b1222437f574d5a967e3ac84277a236421313b16c09b5037177d076c1f42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kue66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f3a048b2ca0fdf236f67a701e69239dfd6c9f2c2e2bc374a79df1942494f3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lapis72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65cb42b17a472402318811c5856d7f035de67508e0696af9091b8dbecad2da30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-liwet87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ae3f454c3f9e1efe39fd4de4d4dfa81cd7f2840bab00c6636173af956d1cf08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mangut50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c6d4cc1b94d719043ceb03d9eb69bbcb48050536706622a572621352266db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127499 Malicious code in irma-semur90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d61b10bc9ce4f373fbbea1a1b2b6103cfec073427d3b3935d924f996779ecd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125085 Malicious code in bambang-saguer46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b9da0c13fc48959aed7830809dee70d58cd8a4b0a458037022614224830959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127042 Malicious code in hadianto-getuk56-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf627cb1093e7e84184a6dff58dce4b1bd30b72b897fca9d5ece105bbdee386e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129391 Malicious code in possible_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f3852d3551113f90bf15e4affb9812de309c8a06526f5309b299e0b547dc1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e9b3e76bb227642d60ec22903a9caf202d0d0307ea504fab586fbce5ef4807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...