MAL-2025-147723 Malicious code in scorpius-yaml-ignite-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb26d44d2898df0a6ccdd6b1b5623f9f5e5a5d9e158848b37bc4af1d4ad9f6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147297 Malicious code in request-jwt-jest-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f39cb3751e045e8297b0d6151b30d73f8912bad4940b767559fb974d0ef0b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-polaris-playwright-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e983822d8b03a418bd8a85ce536d41b0df53160f182584fde4cf5e0a104f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in repository-triton-canopus-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a42074780f1f87ff450718d0cc457d9f648d07232d8b109f0e0217dc471b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-orange-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e043015e7dbc9ad51a628906d4382c4934aee4fc3185ab47b822fc934bcf39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138995 Malicious code in scornful-red-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18b46222ad56058a14b9ba315d2d0e6059319d63a2237f9869a98de121dd992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138805 Malicious code in institutional-violet-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51eff08cd719ab80220636bcdd687e5e99fec5bb37ad6bf7cf2172954a91741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb2c5fbc9dc26e579f79e92aec659c4a95ac4d8f9b64f825abad5e7e0affb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scrawny_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0dfa00fedefa86f08bfb4de451d63f4ca479fe7d24a1edbe992f175f8b11e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telur37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b020dbd27b9a65f0b47aaefea8c61a736353f099782b04c96b62551ad3d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-saguer60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a451f89986d7342a914ef8abd89c7452bc3838db5dbc8ebdc16d02c5200380a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tiwul89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf2e7b0fe5b23b34cf0813c756e8e946ab5923862c83c828cd058892149f655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tempe26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad05af760996a17a47c02f66d94e6361036dbd128c39859b052f755cd6f4e0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tomat59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692358d9a9fceaa9ee22297eede3d59bb15599e3d963eb45a130da4ee08029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08bfdc0a14a3c8092c5296ea5b7ec5acc34ebc0fce78efafbed6947051b6641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-taiwan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05b15265048620a028d23d5acd15e2c63134db3ed2ed45b546aefcde6ceb7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8ca5cdb8d9099c72159f766de314e2fdb3a4003193aa64cf2e4e732af8c0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-klipo8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc40c80107a9c622b1815c2102346d72acaa46a55210828f93bfe4980fd973fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telur27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb1a6906dbf735706806fe515e8e45bcaa660509b4644971a9cbb4bce6117fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3320e8a099f9c72a2f3829b15c27bf98b94fbaddfdc4110a37d0a87c2faa4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...