MAL-2025-148326 Malicious code in stream-mysql-typeorm-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35405c74b80b740ff6692a59b7390e4f6533a8de1753a6bc8b734da445044bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142402 Malicious code in farout-chariklo-jasmine-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afe9386e40599cb48ff675289b6a309d488a323951b6c444ce1455dcfa503d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142093 Malicious code in epimetheus-enceladus-commitlint-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b5b92625cee23fb6202ced8f506a7afb92981746127a2cbdd7cb2004310ad60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147680 Malicious code in sass-loader-npm-markdownlint-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b1e0b027e56351afbf80c9ab89adff2cc97f7015039fa94d51d52ee841ab331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-nasiuduk1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b353f378be2ea2b781e718357cbbbd20eb354dafd12ed3d0470378b8a0e3f283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-mieaceh93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e89e4991e1e46b9667b9fb511a63eaf666f75ad336409afcd36e130537e4cfc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f445785c18c8cc8cd2c7493e880c1be1f1d05db140c66051bc01394dd4f33993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132426 Malicious code in cici-kolak94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9249093ccf8734e3eea5c53ffe9d563da663cc2c687c9f97fa6de44579d329eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137252 Malicious code in technical_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77704b1aa8d00ba73ff04c210c49560a1339d010e1e7491817afa453fa319a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134119 Malicious code in hendra-gado-gado51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655590434b5a3f792c2f401d38703ac7fc0a5a7a6eddd8acf855fa68e0a15caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133152 Malicious code in erick-papeda90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a14533018f0810d630b25ad6922b0c77ddbc62f7427db18c53828780772a98d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136980 Malicious code in sinta-toge67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc8f7170e3e072414e24102984cd9f2c5da93c509096bf4d4e3510d9b6d9c84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137481 Malicious code in udin-ketoprak16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 917d829e866ff7e36566c15747d162d790a82a26e29625cf3a8a72e8b7feae99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135161 Malicious code in lina-keripik43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e5dee9d99ca984f65471ba0e0daea03d84a15d45b9cb722067190e5adf872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131948 Malicious code in agus-gado-gado33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82d01e7c7e97448576082b0124f2140856f915d24a22eda00a8e67ef828f1b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-kue67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af5a0be93b507c4ec5f08084c2942e1624327c1be1f61ad790fdf741f6abf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventual_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 266ffbdf1cf2b9fb9cb963f54e75dc2ea72831c70ac23645004db6bdbf433390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lupis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da477a8a52c32375ec2b58c11d47e8605ef7f5402e7fb4f445c24d2d3850a39e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-dodol52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28be7cbc32c872446374f3af2ab753b32ee10f8c92adeb6a9b9827347cedc980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...