MAL-2025-149192 Malicious code in vortex-taurus-less-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c2ef051a36bb0e4800381cf3376c8859bae31a8d99603d5442f10b560067a6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139884 Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e146e7e103cbcdd39e76b3fd5cf858a075d921f796820be6880d0bfea79a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147931 Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139090 Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138674 Malicious code in dying-fuchsia-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aeb0a445c330a06b46a7c6edd20d25d8d0d00d22f1f675e959b9aeebdbd67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary-indigo-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64749bbe5ce51de06bcc62324c7d1a555e91365d0f78c8b27652fc2ae5972044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gorengan46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd736304d79edd2096645adca5c805ca15698db0edd996091d704f5bc131f122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-lupis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfb9c49bd72d7dcc9d9542141f7dee09f3287eef81460a083b24ceeb6983653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134329 Malicious code in indah-serimuka98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33211af97448c97ec6757e56155a92a1dc902da8962b0db2b59136b0c736db14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137675 Malicious code in utomo-tahu71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f1fb5d8e9b77a675340d111397311164a9b9711a2cc81f42661381bb6ef598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138425 Malicious code in zain-mendoan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457f7679e0ff400144d45559e13ac02021506eb4deefc71ee0cee7cc20fd438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132521 Malicious code in citra-keripik67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37612aba1df0a6134e5b0e6bd05ab2a82c8b3af59a251ce4fc567f4ef6ee430a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135037 Malicious code in kurniawan-semur43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f446a29ca84560be25a9bd288ab2366823a32ac20818dc4a5cf4a7810363a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133471 Malicious code in fauzi-rujak11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ae407ca3791eae1206c0262db9d36976682a8da8df351b4f1aa2f8ae064c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134466 Malicious code in iwan-keripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9500b910bdcf0ec94c55a2360b2583749186a32e9c67791257fe6507333aae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137443 Malicious code in tuti-rendang90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1520ac70acb64268944802c03a8fab80efe8c76592ec47523c9849579117502e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d4c623fd0d90883b9d3d8501cc361724602e94977028d652d4715e97e55821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...