MAL-2025-140126 Malicious code in breezy-crimson-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3875b560289ee53cd714075de6f50623325d7fec152a2d1a0035da53e9289f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-nodemon-hexo-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb987aa70456a15020ae5bec6d92271c204109174d673318920306584bb123b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140364 Malicious code in canopus-lint-altair-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147118 Malicious code in redis-webdriverio-radiant-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 897a7e6b0d29673d0a35368dd757e92f753b005c3adffa0fa191ef74cbe7ff03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144826 Malicious code in meissa-pm2-middleware-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545972211a2bc326cdd56d631b2c8d1331eb9494e29039e8cdcdc3e098441ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139966 Malicious code in betelgeuse-apex-async-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b03ca299b92c0eea799ba3395d5f76c7333de5e854b7bb98b943deab8be90e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-typeorm-node-sass-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80132cdc461affdf7236191c74d5743e4c51d95a47f4df8fa13817817dda1051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142803 Malicious code in ganymede-impulse-avior-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c52c9c3522a9ca15fb4298b8c67b9fb8f2f0f3e6902c6478854c8c58a1a78b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138647 Malicious code in dead-beige-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c82f1bc8f94c4af627e49453ce228f8a52a22768038b9f66ef8865b0a3276be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless-ivory-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d60a4ee774edfc3c1e340bded653eb00241516c929eb4a67860e6bcca6446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9a3f82b382e03bc5705ea2bfc36cf20b2a514f0ac256fe51c09772b12355b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-teh36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86ebaf4a4a666629c4a014f54aeaeef4cfad81d82b09a152a4f6f333f44dcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gulai58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c8795a90f87594c6488fa4e857747f0a40b9116c6524909220c62865a5cd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-bakso91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74b0e4a33d8aeb1a341c1c75a16a8ec5bef60e1c770245afcacfb5851b04da5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gulai8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 927a5eac5f530a3f66412d926216caea73fbe1ba6caf83d8232f766ab53ee212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-martabak10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4eb3b2dc98b0b4c873ca2be323ba2a73bafcfd820423022c2baf116b9899d17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-liwet69-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17847293108135ffe0933e50a49b6e210060b386e06cd0e38ff78904289a9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-tongseng38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c532251825dc2f4a8f10c90fa301ffbdcccfe3b28e1fdc5c315e1d563d2444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...