MAL-2025-140097 Malicious code in bootstrap-auriga-sequelize-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a36dbb251825bacf1163d64cabe662dd85f1e372883e82e36a063c852a0a2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141610 Malicious code in despina-ultra-antares-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819cb736fabedda7870c12df38f766380a63c50b19c79037d869d48113023350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-getuk38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c9742373cbfbce33c25aac7ab216a2e98f07cf1a3f04e41f753256634fcdcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ragi54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb6d9aea4c6513cc24dca53c91e453d78b09b6d2a3007a0ce084edb6f98282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-lapis8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32c90eb67c60dd1be3ee0e83b19fe88e94df32b3883da67c67daea8f23e444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasipecel86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5f8400011e7644c72a3ceb5c10869bc19f9f80856aff89d8cd0b0de14986d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-semur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f396849dff0d41c94e744d85b846788a128942e80ee2b7a41936c9d9aa106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b039b6ff80dd37d37bc6ed5dfa3812beb33b1704568aa7b3e40db8c336c8f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sambel88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e3b85e7b1857269be7502086785fb414636038befc0ab247d9b6e19e4d95e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a383f691bf39d8095df1984b160a42950d168c4231b8a2bffb70045c246856d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134421 Malicious code in irma-nasicampur69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1af6b749a5c682238bfbf4154049ddc91fd1890cfbf0258fab86fef0ab90fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133900 Malicious code in graceful_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac89646c5e71550b42aecb899dce759c9930eaac0fca2e336d9946037a80538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137030 Malicious code in siska-tempe38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85c037d37362b265f4e13a4749f798d18820b1a9d4371216f2b521016e8adcd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132574 Malicious code in cold_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42b6da5a8c8df97813ac3aae50db5780d2821cc5efa10f0cb5e32c4af79dd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135812 Malicious code in nina-martabak70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a858f4b43f5a230d7907bbee60a0939b147ff93d05a01746438994470309fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-ubi58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93d7d2296d52ce03b1f6c620f75b6a8ef25652019c5b02330d74fc3256429fe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd11f1a2c36472de68d5c50035e5cba3d001932f8a30974614997dfc3b526ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...