MAL-2025-141173 Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145442 Malicious code in nightmare-node-config-eridanus-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6677d88fd923cf9115bbee04bfca99325c4c905ce3195c80e37a50eedd33ddf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-cors-bootstrap-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical-coffee-quelea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6593f025cf4fe4473f5fe807674daf7dc74ddcd5183077aec7803f195a005b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138581 Malicious code in adequate-purple-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65d9ed90c6b0e40b3541d480b9b1ba126f97ee1c1a5ff0683824c7d064fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138903 Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-teh29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221d9fe2fee42b7e3f88fdc3c589fe0f053afabc3bf21c1867b01dde7a9da9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-keraktelor67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69070965056546d2591a01db2fb1a18b3b77437c8d5c48cef398ea2960b21265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138574 Malicious code in zul-toge84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b500128b509918acd84abb6326569897b44ee1424de7dd9bce9a6808698a6b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-sambel59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8e04e72621409c47f47333be2e974ad991682c58463982d574a90dfa154f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lumpur75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e37b32452a284d138676acef25038a22c48d46f20bc27cdfbf51f809f0c0acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-gaplek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b95b3b1a2489f422f4b48e1e038fe1be36e506c54561ff57335ad8ec97b412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lodeh89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef335d0cd7ee7e4c18d79d10ec472237931757dd7f095f741cdfcc1ae7531b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135723 Malicious code in nana-ikan94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51fad81ae702e23d6a0ff87a7faa0677287772a3e146dba1b31a42df38ab06a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132317 Malicious code in budi-keraktelor50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb40dd6b3452d68c0ecbd8d8bcec1744b391e971049b5b6c6fa8caab34685ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135714 Malicious code in nana-brongkos25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ca921c0ed3b124a7ad326f458771d784989558f40ffbf51fd95a78ab7a9988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137669 Malicious code in utomo-sate14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296d3abe23b84ceb16ffb53d51dc468b3225007be756ee467e492a0041e2b88b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136302 Malicious code in putra-brengkes32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc27f0647266962c81c2ee90518650054cf8397da46791696314d1f7bacf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...