MAL-2025-149586 Malicious code in xanadu-async-prompts-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5fc19090c0485f4ed4364f6aa000cc1dba19998acc98c7de95fb08cb3b9b70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140607 Malicious code in chai-virgo-spica-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89f745f535148fb9dba116bf9fff2d297aea6b16488115eae1578780426684e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149078 Malicious code in ursa-venus-terser-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e21328f1d7d1ad0ab1a8c517d9028d0de2ec3dc3364feead5e8eace5a4d4288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139136 Malicious code in embarrassing_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61943374ee28083fa6ec7a427f8625ca5e007b6c069eb21508d20dbe6f2b691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted-red-raccoon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76490f3e6232a7e0626fdb703b1ff71beb526e993467e889a3401a77831b0db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138596 Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible-sapphire-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a7b48da5ee7c775f6e071f30dc2e2f58f0b413af6679319c0eb06b7ea7b1a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139093 Malicious code in various-plum-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3103b21361967e7e80bf95b789f29a8e5ed09309de185d3728e76f2ac8a94938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139060 Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-bubursumsum79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96fc61ef9447edcd2cf3c544c892f14185c294c461c5274ef446e7c9f4141d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d37e4318c290859432493c8e63abc538cf7754c289a0998ab054e1d1a9a46fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287019efdf7faec1ad2212d388951d2c63c90851fb0c5302bed2b2e88dd2325b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-brengkes19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb522714dbe543b15872b2de3d6cb4cd2c98cf3a5637b23fc1a344dbcb98ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137547 Malicious code in umi-lontong7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed11b62d302a5643770366c7d0d594a7ffb428acc23f98e84cba876eb6b72f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138348 Malicious code in yuni-gepuk62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3c1471b8cb2d019f0999d9670a1996c10891f291dde408f050b5a62ff7eeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136983 Malicious code in sinta-wajit63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3c182facd83d37cce73e845cf0b64cb305c49f84475e9ebf51a6ecbb2c1fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138546 Malicious code in zul-mieaceh81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2f2f9a1724bd2d51b02e11d01e92468fd7105b6e92d601a1c0c5f64f7a417a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sasag75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd3d626e21cef045014701a8ca3a85d1cba6fe9332affeb3cb41f863c463bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9a9bf912095b7a5f458e8d73e3d84f439458dd77143e44bf09ba828736308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...