MAL-2025-142981 Malicious code in got-jasmine-zenobia-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dadbc22d6c22338cc6fc5058d13df1e0f881a222c8c88cce245321bf4480aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-standard-global-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f40857900117e23b70df586911da4b9a5d7ea29996d0dc9e08ae33ccf5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147788 Malicious code in sedna-promise-dotenv-parse-variables-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4106b8b561425fbf53c8ff86d6d731d1c4ce20b3a437fe2bd4f5ad0a701667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-morgan-dotenv-parse-variables-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e339186a1f5589400459b801108da048290c8917ec2fb3a0835679babfec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-miranda-rocket-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be89cfac1299964287ae5c23da35e42fa60b5f6efa38ee5baffed6a9235ab7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-serabi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726e29c517f48cf9e4d2fd7c9d7ff0b3b77392c5167bb8d068058c6d602ddabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-buburayam70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5b6bf49bfdf19b1fa3ca1d58a2147d25caed5d6917fed43a54351504ab7ac46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-brengkes53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c890df56b12fc007b6a3302bbb545cebbf5041549adc07ebd1d1fd7236620d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sroto9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60d9278d295c62fd7dcc020bb6f8da986aedcd6552f95da9ccebd2b348dfa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kacang49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e296c7ac8cf766b02ed057477808364428597db31bc2b0f07131457b741b39f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-esdoger61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc985f788060c1f16676e7b996011faaed2e6cda650d9765263d50fec3a5ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fuzzy_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af42a06297e8182cc598d5b71cc3020f25f91cb5add5d9657dc935a46595e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rujak27-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5967f3c4e5ae03bbf7861242e1a199fbab45e698ba6de973705edecbc34e5039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tumis22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bdbf7b9210762d144309b5b1d3500c00b708c0b2fbcd0a173df68680c3a34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-sate83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43aa306d17737d0854b269d920ee9844cf16adb22080a50a7c02d72ed24a72ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-donat53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0427dfb4a39279fbe055f530a8628b9d3f2ef09cf458668e4652a2251b71e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bbe09a5563f25eb65c8b947a3697c781481d61409a145cbc4dca5a009e2537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...