MAL-2025-144905 Malicious code in meteor-corvus-heka-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479cdad0f54173ac42f22e183a69a52bf1784726c75ba6dc76eb8c6b38dab700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143169 Malicious code in halley-superagent-hydra-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4642c3f8ab7d248da3daac08d7f2f06935af9afa6a749306e9b8fa8707d54c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spectron-ceres-loglevel-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d425ced84185718748eef6d19c741cb046ce77c9e96bc494a57beb19efbb855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141373 Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa981273f514ee3381c8f97682dc76879ff9e54b217cc528d3e46951268c90e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-pisang22-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a359eb9434f6595b8e011d52e3d01aac83f1714cca3ff8cbb2015c1d76977eeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69a4b1718322b92d918205dd95cd6c8a76f52973bc449c36000c594ee4c70bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-gorengan17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b01e4143b2af9eb020a808955711dfc24e2614247881117a49cfbf6ecc28a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sroto9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60d9278d295c62fd7dcc020bb6f8da986aedcd6552f95da9ccebd2b348dfa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-brengkes53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c890df56b12fc007b6a3302bbb545cebbf5041549adc07ebd1d1fd7236620d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-esdoger61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc985f788060c1f16676e7b996011faaed2e6cda650d9765263d50fec3a5ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134698 Malicious code in joko-teh43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a22378c3709f0b339508b32dff4428948a3e4003f5926b19461a552eff80f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133111 Malicious code in erick-botok92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b70864e7e3475129baf766e0308c47ba4fe430d7cde341cd171918b4e93ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136912 Malicious code in sick_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb673eb567e626e6dd92e52bd3667bc5cae44f05bc8b85892b54fce6c2d3261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136302 Malicious code in putra-brengkes32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc27f0647266962c81c2ee90518650054cf8397da46791696314d1f7bacf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135a84cda64a09dd0e4e91546007c8a8c02d203ea39cbf69ade73e6d052bfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...