MAL-2025-144733 Malicious code in materialize-await-cosmiconfig-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153d9c78b1503d4d82f8378f93edab2df4d30b9f1128f3bb265df2952e37843b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138781 Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138967 Malicious code in rear-jade-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf7ff5f6c2b1d082d322b30ed31d53b39e64ff3afc70bb76f822256e0a908b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138890 Malicious code in naval-fuchsia-bovid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c4c071c371c34553e0d0b2ad0d210aa8ce7964a9ce805eb2d9bcee72a40ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e0c685ba9e2fdf2d1365daad11851f09cac3fd474f10780c37999ccc6115a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kembang35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd96dfc52ac103b41bc9086874e60f3e34c7b36c7e8e02a02af181f2f1fd67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-sambel41-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8a7cd624256a76a95db800426c2492941ac32157f7e942e277868ffeabc324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-jamblang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 688759eb51ffb540998b034c02175109d99df8eff2a80c0be6ffb198922e2221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gulai79-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c20c28d3e98dcf9a2633c381e2bc9141f4b7730185ea07b5a717cfcf48276ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tahu78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859346bff96462c8925e497aa29ae37f3094ef1e855f5ca1a66587b89415561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-bubur52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6b7edbb2462437aa9d2c714db352f520c08e13eb4e4e3141ca2551da90de4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0644c1a171dd719d9c80bdc9e3493ba8cf7248cded9016abed8d8e087348fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-sambel89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cdf8ed1c743fe1b3337308a5cec2cca62a68f58d8572e7512e103e2d3192bf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-esdoger38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521c803f26f5615fdd7b1564871421844303080172ec83a1dd3fcded04ea1a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fc16ec40cb8991eb21c1e8befbeb06bd6d2796c9ff0a9ab20632ff9c7e749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bakwan58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa493afd0bd742460facba502b3199b481ed5c9e9a55e7d3baf011993d08e730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-rendang46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8891eaad61ec019e2302df53a0106f8b1f3d13a28637e245576aa0f58931e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mixed_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c05760cc265c50292908d61968ce57cf73edf65570b51139deeeb26635cea72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kue21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2addce2b408ad0106c1b4aa1c2afaa83c6cdfc0a4ed9fc0c4c23ffed89972c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...