MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141319 Malicious code in css-loader-terser-rimraf-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3369b39705936e81e044143deeb3d264e0c799da1d7145d7a34a47964089ea30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139701 Malicious code in aurora-luna-ophiuchus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7529c8b52158312b60e08e1fc053d2008b88292b60a340f064f9c5321f2c53c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-botok50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da56b4298ee7499063d922a7bdb73a3409e1c04027e6f6ac87c79c5eb07bae27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02156cd881e85734f0c34c5321e2db952f8caaeddefac86d688b73e36033af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-botok23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153b21aef4db6ed68c33d6dfa29f0a55107b5e182cae0049ad63496782380000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b63ba17152865c04b6d9c94679962fb327800ea68d5e91847bba59a0c5f06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-brongkos100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b41e1c6937da5d980b3008c24f401f2d965529b6818da61a858f743a956610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132390 Malicious code in candra-sate86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc4b8de89e1bf132c1e3785a0fdae776d3a67bba6477ef020ad4d9e78b8013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132311 Malicious code in budi-esdoger64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24be939725c60ad80c7fcff34d44012592d73c1a16dab314bb347686ed34a886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138442 Malicious code in zain-tahu86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63055904e9b940626b15ab62701f820a6348b885f08c628d371b4a2ca5c7771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132677 Malicious code in dependent_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a5a54037a6022988b818f0e1f3de35a996825d0ed447ec2ec5d40aaa9051df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133989 Malicious code in hadi-tomat91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270e6c975c49a1f625d0d2beb2d225a22527cf2d14ae12df36ebd31448cff297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132864 Malicious code in disturbed_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534c7a4d824258c8225c709664448565a0ef271e01428cecf2d731dfadcea58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135736 Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133158 Malicious code in erick-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e483fc9718529661190b6e387812ad5c774b5a4ea54818239c60e03d139c349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134201 Malicious code in icy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fff2ff976a435d0387f6c4af9fe5acc2e2802a45e07bf1ccc1bd7e6f3739011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-peyek61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaad3eb407725c72706f14a2f50a841ac610d7da0d9b0d2771539b010f1962ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...