MAL-2025-149263 Malicious code in warp-callisto-library-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30970dd99405b0fed1c24b38ff81cc49d20d1d6fa08cc6823785173984de12cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142155 Malicious code in eridanus-shelljs-oberon-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gembus53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c4bc771a2d8415b32641572031b5c96664022d9dd1865669270fdc74a1af98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138250 Malicious code in yanti-mangga99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa84f918dc7112813ed45d54ddf18966e244de3a22c1d0fdd403264e3c39a83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136470 Malicious code in qori-bakwan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1196676e534fd86325bea63189ee07e97d5915f37cd8b0821f7ceb97dacd628b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134077 Malicious code in hanafi-lodeh26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2113c05541b4268dcb623f5eaa203282870dc911a4dbf8689c8e921923819c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-miemee25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7be14ba4c0bb1164aabd2bd20ea33907dfda18a7c8870102c727edd0a62d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136442 Malicious code in putri-sambalado13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf438f9e0063c45a71fd3e5aa5441f03ce98258e49bfb4b894507b43b819ca42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137308 Malicious code in tiara-ongol-ongol98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b2edda9a38ee938f8a9f044354874d6ccef98ec8599525a1df00993a4ac69ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lodeh2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71788aaeb5e3c3a4219aae73127b1f28fbf5033d771af9b311b19b282abeb131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126051 Malicious code in eka-tempe23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2d4c9dd8c3897f9bc861e93263cbd691561e4600f03b0db7e9fa5186f8a1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0f1c77132d140ef04a6401db3a4fbfb1751fe2c853ef5a93d3439e312b7e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129687 Malicious code in rare_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcdd7c1edb1db76f891af9dc0bf4d65cde56b1457d5375fb4650bab0ab5ed081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128193 Malicious code in lina-buburayam17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0093f5b887d2708c23fafb8ea27ee9c9c302246c530421c22952b0c099bbc51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-rujak12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2676d3f3e5749247e467b1685d06663dddd6091d1d043ea3880912c7c337f401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-getuk33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc37c01173905771b0f7cef8699fa5f25beb9185e980f3f216710b589e670e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121863 Malicious code in missing_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd4d628a3e1a5229b4c40f5fc7dca41092e6597ee12f413846022b7e2f5bd5c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketoprak77-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8c9fcbea6adc8a2cbdc4ea25af51dbe8f7463b8ec36b910716f3200cb34953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lutis98-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d168fcccbd9274061e394a9cc48caa74565553efd22e53576a8935b91c1a76d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfcbe75b897cb2f8c9e89f7dc185d1059d5cecc5180f769c761d997a81b7931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...