MAL-2025-145882 Malicious code in ora-eslint-config-gemini-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adcc24c27025a5441e1c4b98214d4687b5681a0e5e0ffa0d6616f4868e1f2e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-titan-rollup-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8d6c574797e2e2e679ad497bd80547d1a272b15b1e582052f42f82f871c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148200 Malicious code in spinner-jabbah-dotenv-safe-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8a3cff783e8ce4ca144f5365873cb4fe15073ac53fe9fa26f546b053cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148867 Malicious code in uglify-js-bunyan-solis-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bd78465b6b510bce2ba9729f0be6011d5aa701b7932571ff00e95f439f01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sass-loader-gatsby-chariklo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2804dde5b9b11f556c7eab05fa8ad604437bd20aea188b9c0811d8bcea02e17f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138837 Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c51b660b9ec6b3f213ad3e811967f8b198fb8d337aaea886c878ffb7ef6ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132653 Malicious code in curly_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5417e9da38b97970cf422e0bf4a8e3c818f014707aace9fae32aeaeee52c2907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467ad9522c1d599697fc058592a4d3fa79a6556b31f6338cd663a6a1cad7c098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132738 Malicious code in dewanto-semur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c561e0e085b1ea8e182a39336c37d2d90efbcb604d49f2f8d60cfbe6b7d6da2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137819 Malicious code in vina-kepok88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b40850a69cfa4ec223ed40fec022bf4f30078605435692a8e074dd003107c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kue28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748bce1ea785b96145eabe3b7721bcbb359692e4dc100f606c5124deea205ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126761 Malicious code in gilang-lengko90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79039dbfa575999e6821e9a2b7c0f457e3041e5dda1eb1f5757378c644d445d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ketoprak41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 387fb15a973566e8fe5f4e4c87f40cbf487b5f0793fa71263ab0ff919fb8a340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126480 Malicious code in fauzi-kue30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0630c10f76993a656a40c8a0e961d353192d9f064c104da0f7ec8156df7d5805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-naget90-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2985a3d0d4b5ae86fc8b035522a27bac49cc3185977076c5582ae7c202838ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-sego95-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b78d9db1483428c6044ef7b61ab15ee405d5bbdd3a6f65136b62cbae970beda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sasag87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e0c0fc1f197156d47507ed270792a9d9ce42136887d0d5841df4bcf69971281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-buburayam43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cec2b8ddcd02c3173a83a167dd9ae5906feeb432e3e58fac9f9952457f6bf59d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131672 Malicious code in yuni-saguer19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8cf67838b0ee55730297ecb1015f7ecd2188fcdc5f50853a641e34bc2c6f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...