MAL-2025-157158 Malicious code in jurss-gaasd-19s (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc99b4e82d2093f9d0b898713d44d320490eb2057567023475623b1de361f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165663 Malicious code in saku-aku-idusanlaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c86c22ccc26835b3dd3d5930cd065fffc4453d1891e786a6e707e94e41546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154508 Malicious code in diago-kulpo-kaipasinako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaca0df0be872cb403c453e927c3f81ffeddd9c05153f19cacf04fd195d6ab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164580 Malicious code in putri-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e07c57c054fd5e454aa1ca202613bef2536d763142e926f9e7ccf1cfe1da15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567dc980f4b25fd0a9c2f494fc0955bcdb319280914b61cf326ae8ae69c0251e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear-plum-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c818e662b2c1f0582429a212cfafdeb259044c5e9a61b528d10cd36a0bf61b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b7777d64a1343f42e8f80d8f8f3cde9e71dd74d38f9850534c9214756d79df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141236 Malicious code in cressida-loop-regulus-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff2ef0ff2ed716a9444c8d00976ad31a124b97aeeffd1954863b551d3f09866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141213 Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-wolf-kastra-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03dada7cfbd3c9b525f4da20a53923820753281a805f97771a572db29d36a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-materialize-passport-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aeeb3fbaf0c957bd1d21f84c3b5bfbf60932f1fac91db9365ea346a9b6dad2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3afec8441ea00da53d6434b7d12ff98efb7ce3e538f9991c06c260651f60ce95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146395 Malicious code in postcss-loader-fork-levels-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb87c440bcb3eff380092f73c31bd01232d896ff500023793df85c072d0644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-teh29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb3f0d2e64c9b06429c092728105069984d54703ac84bc9e566c8e4adbe5896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ragi45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7bf065b048bff4630dee50920318359b47141db21cc68f4fea24877e4a9ab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239baa4ee5be2314b00c6366075b5d161fc8a0c12288c3839e1382e0c010d0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-sroto44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247af32886f5b7873096ebbe4eb2c6870b5908af3878fd0cc01fbab9b2f38cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132181 Malicious code in bambang-rujak92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a5f0070ca1ea8bdb23ed34c9c9a18c8120a3f960aef8d9ffee39840fdcb6c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133919 Malicious code in growing_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85262dba694a40b13ebf7c60fb60fa7e72bb97aa1d452c4bf34a87e7adb0f90b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gembus85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b846ea0158b0c7b53745ee1af6c528059b07d0fafb2721c2dac3c012ed979346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...