MAL-2025-146712 Malicious code in proxima-enceladus-passport-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8600d80a5e72e3449fb03483c9e38e7860062aad43b05895d923cbe105018a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144103 Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139959 Malicious code in bellatrix-titan-eslint-config-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a7feb3c4ffa3c82b81a27ccbf2b20e0f1e93df88dcc9fca20cbc9c42eb9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139082 Malicious code in tory-maroon-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf1118128f7f95fa195586236283c5692f80b158e4907847a39edbd7299f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138600 Malicious code in brilliant-indigo-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde506781711f1d0eabcd1756ed03bfca3c64564adc7bb6e04744440292575ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6c0e45e6f0c963af8d38af7807e79f74b4a693754a0b1d6cf5870eb79d36de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-taiwan23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce82580e9dea5dfec85c9e08b37dd983a7aee1d011490e318270e2ee402475f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d70a466d6da81ae0a6f86be871128bf8b832cc4b9f9f663a60898b7b36d24fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6cb5c346fade56b62f1aa6ee327fab6745dcc45158ee64ba26e92865cc8f459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed558fb6767d86600489e53fbb7c1da8e4492fd320e164e099f5f219ec9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-soto16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b51f669ca5003276143a5d0f3636ccb0b5fc00b2418a1845ce709a468c8b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gembus15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb8fb26dd471cc68bf22b6ecb210b8a1b0aa21dc34ef19c7c57062e788c948b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patient_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ca731369d3f5eca454335e56450b21c94bf8d4a1024dfefa7f80606e481d63f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-dodol52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28be7cbc32c872446374f3af2ab753b32ee10f8c92adeb6a9b9827347cedc980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasisayur35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa856a1baa22181f60d173a1b34213ed99334b23555e25143170ed830c4f8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132463 Malicious code in cici-tiwul37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cef406bf8c4a0c0dfc25d69768cd7de55b2be120233d7143e0a61246a4620a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136197 Malicious code in patria-kue56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860ed7d3909eda61c3116e450b4f03cd78a98d36ae6ebc59c98914eca852e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136846 Malicious code in sari-lapis38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7d135265cb44e06c472118a85b1b65e5094b85d1a8a68a5bcce9212f2fae2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137425 Malicious code in tuti-getuk60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa529535073ef7fd213408df19367975369d40fdb14e17517aee4080b48b5371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...