MAL-2025-140589 Malicious code in chai-firebase-koa-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58c3684afb31f84cfdeb0ce06a2cd60169e7022b8dada7fd26542b56b9544dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148501 Malicious code in telesto-release-it-google-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ccdd5032ea5072b6c78227164fcfdd6caeffefe98b43a5d8156d92454dd74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146200 Malicious code in phoenix-lint-staged-auth-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9f820a980eb156d3ff985ab85292fd261b3407f266fb93b0a158d2adb95784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144284 Malicious code in leda-phoenix-bellatrix-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce266d563d5b2b900c4c7cb63fe1324d5f2f43ff6fca843bfff590fc2a4e0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147297 Malicious code in request-jwt-jest-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f39cb3751e045e8297b0d6151b30d73f8912bad4940b767559fb974d0ef0b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-eslint-mensa-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e96b4079b6e72907d3b6ff39c643ac572b7e7e2be3ceccd386b2ea8fb40f2d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-orange-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e043015e7dbc9ad51a628906d4382c4934aee4fc3185ab47b822fc934bcf39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138805 Malicious code in institutional-violet-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51eff08cd719ab80220636bcdd687e5e99fec5bb37ad6bf7cf2172954a91741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138995 Malicious code in scornful-red-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18b46222ad56058a14b9ba315d2d0e6059319d63a2237f9869a98de121dd992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3320e8a099f9c72a2f3829b15c27bf98b94fbaddfdc4110a37d0a87c2faa4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08bfdc0a14a3c8092c5296ea5b7ec5acc34ebc0fce78efafbed6947051b6641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scrawny_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0dfa00fedefa86f08bfb4de451d63f4ca479fe7d24a1edbe992f175f8b11e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telur37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b020dbd27b9a65f0b47aaefea8c61a736353f099782b04c96b62551ad3d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-klipo8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc40c80107a9c622b1815c2102346d72acaa46a55210828f93bfe4980fd973fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134016 Malicious code in hadianto-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d407105de245ae0d991b11a0f7f36365b0f28c8ed667c694c0a7b8b89cbd508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136303 Malicious code in putra-bubur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c710304fd0cf6d0eba621cde206bab8a25a3459c3114985b69c73be1555cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137844 Malicious code in vina-pecel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3e2e366353e704c7541f0a622b8b35d15ce06abffbb4914ec8380023ea9b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-saguer60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a451f89986d7342a914ef8abd89c7452bc3838db5dbc8ebdc16d02c5200380a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-bubur65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099bab7bf2cad3da0af4a6b6f0c6704966ce0a4c9d7b75ca8f25de57b2d84ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...