MAL-2025-142437 Malicious code in fetch-chalk-mysql-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139638 Malicious code in async-vega-jupiter-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64c3ff0fcaa999f368800299f9e3b6834bddc93d44ffefadbd20b354fdb971a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145398 Malicious code in nestjs-local-less-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a585851bb7e48da08bdaa215566063a5c8743693cb1a4763381e603664cda19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-eleventy-eslint-plugin-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64593aa2f22548ad3c6bc1af3028c102ec42659a9ca45334c21087472cc2150b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-cors-postgres-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb80e0079a5ac1d92ba0fc8b0ff143c34a6cc8cd0cb0106ce662a719d2abf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145796 Malicious code in odin-janus-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384e902e971c3bf77f1e3356c7b21237e48b31e6707cb7d609e0efa6b0fef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140483 Malicious code in castor-cypress-figures-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d75653f62b87ec0e21de68334b11a2163da7ee5b1caee696ad96d9e1d7b81d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136449 Malicious code in putri-sroto78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666bb61c4ea25fd8a1f81523488b4a230f0c6aa6fe823f1cac078c5f6e193df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136300 Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mendoan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1655ee4201035a2b7dc22227df8e7fe118ee256162f206b42df937d5e585633d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080b2dc028e0b6fbcb51845cc1ac31253ebcf09be27a60fd7ce8380c5f187aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132117 Malicious code in arif-pisang15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edea01fc09378565a31e526a42ecf722313372d874e6d8d7ce118378225d6db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135817 Malicious code in nina-moci78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ab0c4deb99858b9dffa7ce414b90607f32a2a9cf1c0cc5b9ad1f1bdf346363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-empal37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd85670c8aa09abfccdf3b9a70a08965f051eec9e23c8428deda2c7c75b463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130575 Malicious code in tiara-papeda1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e960e6fdae4c251736a32679b2250d2729c7c9639d6413377daaf1c8a5a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7284bac5438c4162c1af6dc95b61823741b34c0cab0567e2837dece44317cf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128951 Malicious code in nuclear_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f46f6adaca788d2cf65d2886952b5c7f937e768a253d1699c0c64e9d5bd775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hurt_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69fdce09c6fa15ffb38e4adc3028f70a31b5e7648a342f4ebbef5d578cb896bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d802b431b800eb825ce13f68c09e2078b9b514e12366a1183d89e78a9a92c373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-semur42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3284debe34bf5e1f86a1e0fcc49290523608cb500430985f9c6afca8d05f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...