MAL-2025-140489 Malicious code in castor-nashira-grunt-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d834c00470dfa01b95cf4ff35a0bff673f023a2780d263a43bf0c9272d6451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148372 Malicious code in superagent-build-eris-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 906ce772c225466bc53a40615b5f32b6037636043160eb815b1653bf3675135e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139323 Malicious code in alphard-express-pulsar-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa08ea77b8364a8a8b65d1f68d9036e14452f9fee6d342d57dba367813fe8e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139087 Malicious code in unexpected-tomato-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb970d18f72f38338f2689df19d03af3596d67d205682d82d165ff669ca0430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138874 Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bakwan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f928a4d2b8811a27256846cda3554fbb4ddef2156d6ca39ac0b8f8fb11d9fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kue6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2146e7797a36fe28377cf1d296ece91dcfe338cd30b7e058a33137c1c2264ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-tiwul87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d8d066c19acd89e1394aa66b847f42bdc90f3e776fd0112db4038d888af91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a5fc5c1999345811726aa4c15a3a1aeb5729245bd75540486439b6b10579ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133660 Malicious code in galih-rujaksoto31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd452d2722976df5b4866b32271ffdbe8a7dd97f697464fc3b2607ab91a294ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137301 Malicious code in tiara-nasi67-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb5b09535d67afb3cb773cd37cbaf5f87c23451c936fccf8cecc59ffff52582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134336 Malicious code in indah-tapai35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aafd71ce07a92e4bfbbb64021549c9a7aa059f51d42be1211ef98a7e01456f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132937 Malicious code in dono-ubi45-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a89a5a496d1105a32a629d8171b1770e8d1509ab2636a1d2c55a073bc042de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-esdoger83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774bd51f16d4ec523a91ad7a814c44dd49843c64de3c30f6fb1c3f959c7513ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tek38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14166adb70b84ae6a2b08c0512c3bd4e3f07acee3b4832d81e016d80bf557059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...