MAL-2025-169427 Malicious code in tusya-sfd-reaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255613cf52cbb8d1826ac6ad522d8435de68c372ec345cca8b13d2780640ac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-nuxtjs-axios-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfb640a07c1b1d1931c574b6445894114b1830e75f96fb8f44699becae8e49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141320 Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4845b9a3bc9b0f42f3b7cd20d841b772cf37a58a4b4cd85d760de5154291b3e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-foundation-sagitta-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3ab63604cb13b980d2d70c5b2c199f034d114cdcf1aa758bbe94394b8f2ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d1a3126a305e0ebda980be6a84231eecb93f66f66e53aba2ca2a5b400e66ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135128 Malicious code in latin_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9588bd5298ae71d3e6ffa2fd6e153a8c2fd654a4b0a6a9604e58439ad26149b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138403 Malicious code in zain-empal47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74f91684585690e5fcb15f92432335e88d503ae273536b9bf90d4168dbf174a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136086 Malicious code in oktafian-gaplek77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751aafda3e7bc99f8b142c2cd4b59ab17bd31acd459bc1ad7874185e2fba3ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tapai38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2b7548d8ce7a47a226ebbc301b637fadacceab389bf4d04c479adfd8ce65fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-ronde26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f206b0e25913e18c4130ad53be55ff600fdaa8e922e364c31a4c7d79971c7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128288 Malicious code in lisa-lengko94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eedba73a21e1841d888021bdb3ff63bccd0ecf503e440096fabee53ef1e09014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3750fd3ebd1f1a04154ab35de6ad7808075d558b9792d034037faef9cf95464b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af503add09e7a6a38258d7bc405b0409a92f0706ba54b472047e5b7e7c48c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-rendang36-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 787f41fa51e5fa0f33fb595a59ae118b88d3ed4e2d3e2a25cd3ea2c23fc684b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122018 Malicious code in nana-kupat99-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4138b624283e6873c169a03ed29c3ce2145da27874bbe3cb1c86a3d97cf78781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117731 Malicious code in utomo-naget62-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edb0b69c717d850a0cadbde322bab14d07d448f30816916d2232120677599bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113728 Malicious code in erwin-sate79-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17eb03e1748ae4de7f09836c264cf38d07c7f8aa1538b53cd4aef2f4c5a154cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-nasisayur71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244fc29c156473678e14e4bd89ee3efd87425d2f64e72d6c7eb00cb0362baea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94a00b6adf08c93f1c73e37d7ac432057169ac55be2d5f50e36541c109be88b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...