MAL-2025-147951 Malicious code in sirius-fornax-process-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad18cca3b1bc8f7e73a9387d862aa3db2328ae3d33cad98bab4d1abcc726e699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139375 Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149556 Malicious code in wolf-perseus-release-it-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93298b7cbf597b2cd7f3eedeef73414dbd7aa907fda69fd74d6492e990167f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145579 Malicious code in nodemon-chalk-standard-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc33a1334c3ba3564f3045da232e4e02b45ad806f336f9e1fab0efe8a107f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140256 Malicious code in bunyan-sirius-nashira-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80839ae4b1e9d6b67291153829fc2219acb1002afce7fc3726e1d9503d4a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147555 Malicious code in run-script-vuepress-bootes-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f92fcb02abdf3ddd958606e6a604959cbd6e8afde1cec02a001c1694099bfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140359 Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138846 Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector def676e1820aa4350dacecdbfd0ba80a9cf10777815f976f9a7a553cfa7e71e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1bbf51f298231489bede6b09e24eadcc5adbab5f67afc1789b00a3a5dbb1b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133857 Malicious code in gita-rujak71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec3a0dd8087195a0c64c0af1e4fa822c8f6b5379ab341bbd0098c641f38d6192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133435 Malicious code in fauzi-buburayam54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ebb4d1c2e27ac26404249bd07ba0ee4586d31b79c77427783dbb91a1b730dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-klipo93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10874191e4d150da01b05cfbb1a2234fb4db6c6648fabdd623c86475cbd927a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-rangi40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbddecfd48caf7e9d6b810bbf040b88501831e9522e855058607d47b011b532e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3605ea0c1c3900f7990095df6620f5719165e7f7ace01afc36d2bcd35c8b0be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135306 Malicious code in lutfi-lutis91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270ad1dbb381a89242b8151db32aa63c75f5d4de756b7464b444a06c2521cfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136536 Malicious code in real_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfa129a45a007da7abc878d17ac11eabd7c5e46fc826e63a6aaea5e807a6abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136784 Malicious code in rudi-nasi69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7bbd12b8d4a16b7aeb338f8f8352de116ab8c05b3c2c9a5827892dfeb2cf33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mendoan42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d282346a277545cab17bc5943188167e696b4121f303626bda01c3bf2437337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...