MAL-2025-151674 Malicious code in abyil-nionai-lasuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26a857d83c5e972daa63630bb53eb230d18c82fd32695fc2cd27f3b20b7cba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-backend-solis-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47debd0e472e359f6d7a9c6d07a2396dd62b9eed5f75d70e652ee1aa399ed61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148316 Malicious code in stream-galaxy-loopback-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d45ae83d454c1dad43cba0a2f8238b07627a3bf01f9330bd8c4367fc4f2241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gepuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53aa76cda196b46f50c016fb2425da46278c795c0cc2334da918696dbd3f014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d376a752bddbc6c183e34b074758465f8e36f80827c124dd3e64e774341a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132366 Malicious code in candra-kembang91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0688f6145e867308c2d3e6884e6e46f6483b1b1ec1851bae1cb2bf6aa431a3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6386c8962b149177ae5113bef2b534af07b9e2f6a572083bedf2ce41262c0e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134438 Malicious code in irma-sego28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb361a7ecf4deec91963b25d4b3e72e9996a15972348cdc5140d8cc321f658ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137095 Malicious code in strict_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6938227cab2a8a155fad26e9877ec83cb960f653167374a61eb536183ea4cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ad9d2cc2cefbd570efa2989f57c339be1fc717c6eed3229d5341ad84a1b216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130126 Malicious code in significant_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce813c84175a73e68de3d0eaabdba0584eaa6b0c7b2b115f96cc8fead06642ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126711 Malicious code in galih-tahu76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aaa47ee6efc47053bf1cffbafc2b6ae1c671ff491ae6188134ada7b14654d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126671 Malicious code in galih-kacang73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c98508ee7344e6b4357ce4b5c27b71480f3e9c827898a47fcd672c230287734a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127359 Malicious code in indah-gaplek87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30d7ed66578ca5aba01facc7592b24699adf3431c706ce72a0ff404975788c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...