MAL-2025-146825 Malicious code in publish-zenith-cygnus-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d084c950dd5dc4f71460664d9a08a96009f6beeb79aaf14ec9c669e382574b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141232 Malicious code in cressida-ganymede-firebase-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb71ee957d87735cb80b3b5cb9e0599b90d70af44d94f738a88ef243bedd5e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145499 Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146526 Malicious code in prettier-xanthus-mira-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84a4a84f5c6957d09542a7fbcfa103162352aa4cb119d5508f2321327c232bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139087 Malicious code in unexpected-tomato-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb970d18f72f38338f2689df19d03af3596d67d205682d82d165ff669ca0430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138874 Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa08ea77b8364a8a8b65d1f68d9036e14452f9fee6d342d57dba367813fe8e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-taiwan9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1383bf793a423dd3ec5cdb5cc53a52ab2f8ad61e10f8524cb6799afa89069e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lumpur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a36eaea4c1a98596c2c442fadcb546be7e2fcd5f1d1c69cdaa6a6fa4dbc718f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-keripik84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fdd24e8e8de61dc3909a8b4dd3d7aebbb10dfd7dddf50d9a2cda74738aedc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835498ea047a2b5c28abd548aae43c1f0d2bfcc6f64f061eda62df8ec784cea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-dradag97-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c9af1fffdc70ffc50137991b9d0755f812412d30327d69e92cb10a982ef077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2a73c97a8b2c19fadf07b3e601bce023e0bf5621e3155d64a3d325a8593777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61174fd302df58378df7e91933c38173d0caf37c8dfa7cec3e216aa1fd6aa24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-kacang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6765ffef24c9bde9cd633e315aefce6f0cdaef48085532eef7de85f848e796ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-naget64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aa2f259540fb9e5865da92ea9b8db6858f703d13398f9e6040b8f7887da1cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-otak-otak3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5670483d89722af9eb6c1dd5a7600cec05b4aa41306e5f583b59c25ad9dd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...