MAL-2025-142452 Malicious code in fetch-polaris-loopback-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6544bff7381c9dd2c0e1de48ed79409665cd07f2f3ae49b375ecf4ddd3545372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149109 Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143350 Malicious code in hexo-quantum-vuetify-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9e6b120842fe414c20ed2e4bd84e574dbba362c6fea744917a7b6b0d34bdb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139183 Malicious code in acamar-perseus-rehype-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f13b3b72eddbdd6b698b8dbe987a04af1fba5606494eadc3fc663de33f32e42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145422 Malicious code in nextjs-postcss-galaxy-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546276d3b6710db29e003e3d35096e0f4ec408654685b966043b94a6f2e55fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142989 Malicious code in got-superagent-winston-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0af67224d6ced20e78cf16853a62e8f18f7cb7583df01f4ed51adcce2de1bb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144232 Malicious code in lacerta-apex-weywot-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5af945fd83b51e0b4e1ef98ceeb87b03d2659cd4bdf13b320dc9ad61431285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obliged-ivory-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f362365f89f3750073cc6692175242c5f2d5c361a74f6fd8942b5560b6f963f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-otak-otak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc2d821b31efe8480693c3923482f798976bd16a5ad56bbe9f1f00983c0da80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131965 Malicious code in agus-lapis28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0bc1b62614b50aa65f18e9b99c0d8a89c1c6d977cf76f71f5c5e58966d21a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134845 Malicious code in kiki-telur43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbebcc5fa97ea5d9fc308d99d0219910408b413484507719631e909600ecb217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-jamblang92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 976b72aada9cac96b0d1de87f8579b4fbbc958e7bfa077187dd35922195331c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-miemee57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d385765de160c7ff097e89143f9856287ab75288a9992fe64968a9c617457e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-mangga29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78dbe9fbc950de9bad50068e59ebabbcfbb453295f0a827927a6137ec894119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-asinan5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02082944846abfd10fa363fb333d2040c8d2932cc834fd5fa9151a206a8fbb9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137258 Malicious code in testy_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e76a201cd2726d9d0f96b0514487c3ef295b1515567efc17ce4ea75c3c3926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137965 Malicious code in wawan-kupat13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da491d932851850a47fb89ade41bbcaede2ad4c3ed593debe7e9e3d4af915057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136698 Malicious code in rina-jamblang87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b661e8c0f83f80a7e1d60a155b3d5f68749780e7735e351086afb151aeb037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d6f74e9c3060adf0d47ac65b77faebdba4e8b02931a0ecce0e03f5ad8315b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-papeda21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6321a2b01e7017160ece24c4368a9dc37ade5ceb11f8cc433dc4f7f4bd8a59a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...