MAL-2025-140646 Malicious code in chalk-kaus-eslint-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4159c0dbbb89b303076efe400413c3f25ca847b455c5b90c4a461c76df3e9ff5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138664 Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138648 Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lapis62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2abe1476b15f9e72769187dc168770348fe6a925bb40eb0b94eafea6dbbca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gado-gado99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf777b232a939a35018f0b0687f03ccbb1434fc682b6325986ccc45b9ca59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136393 Malicious code in putri-klentik40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d13f632236eb4073d5e70affdba55b4ccd057b041ad854655a6e06b591f4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138280 Malicious code in yanti-rojak22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef48c70f395d2621776c295ec6acc59d6fdfd02ad512a499b2de5e6699cf87f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138548 Malicious code in zul-miebogor9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e217416aec33f17da7ca8fba28a18e594aecdf72ea2c4bfb0fceb7101041f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136300 Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136449 Malicious code in putri-sroto78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666bb61c4ea25fd8a1f81523488b4a230f0c6aa6fe823f1cac078c5f6e193df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134394 Malicious code in irma-getas99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9550ee12c674096efe33c8616b2762553a65943d3b41373ee7078ff9d8ae76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133812 Malicious code in gita-lodeh29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9b203d06b2cdd372f5b5ab0693689cce9049dd0d3a4bb5107e36b985eb110c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136809 Malicious code in rudi-ubi29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff7aa5d45be183487cf2d67bae4ab279a05cd97daef8a60f61d2ed0d301fc6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133456 Malicious code in fauzi-lumpur44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f353d352babde31db7acd80370e367625a21f8ffb967b7da0d781b5e9fb2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132716 Malicious code in dewanto-lengko96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c95ed4bd3dd7524046d4bc8d767e2528f305effa1cabf6361ac597d3eb51f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed558fb6767d86600489e53fbb7c1da8e4492fd320e164e099f5f219ec9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c01b27654acc5829307d995ddbcaf727b46807e0670564c4dad3d5b5c3cbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kupang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f646ae880070e57d252c2bc155948c9b4657fa7249fa5515b3b2097314988c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080b2dc028e0b6fbcb51845cc1ac31253ebcf09be27a60fd7ce8380c5f187aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...