MAL-2025-147863 Malicious code in sequelize-convict-wasat-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8a371ffec811bbe299709921e05c8eb65ef5d526eb298988dbcbb38588651b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149884 Malicious code in zephyr-epimetheus-leda-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93bd7f26a0d6052f2458fbd2a4d3a22ce879f801883dec1ed4265a6116b6f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145325 Malicious code in nconf-prettier-jekyll-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1193615f9567405da1dc0cc9bbb83540714d24ef80292fff0db89a9eeb5db08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d4051c9ad9249e99d923f33b70b461574936311d1e14c8d886825265549a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132110 Malicious code in arif-miebogor43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70b9ac2652664aabc8769866a2e866a2de6a8970f298c418759d53e261a9f84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136920 Malicious code in simple_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9a3f82b382e03bc5705ea2bfc36cf20b2a514f0ac256fe51c09772b12355b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-pisang34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0865d981beebfe3bce4076e08b73a4327deeae829515c71aefb6f56da271c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125101 Malicious code in basic_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f29e5e264c367cfc61afca94d9af3d0a61a220a4272f816a03a1e11e4d8a71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-keripik91-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cab72bafd8f4b7ef1eca4fa485fc15e0ef17637f33e456c0315fffb5fce8f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-mieaceh57-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6eaccb9c1c2dfc228a31198615695918f524a8303a0df83b5a33ed6ee7a9b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bakso92-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f53e561c991dec9c33ee5f4e177216de89f0f6aeb4ed85e128221432c6bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-mendoan9-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49f0b3223a683384e93b15917f27a1da673784bc87af26f2efb71517cc1c5feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121121 Malicious code in joko-teh55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f92a178dee8a4d47c2d2410602429912420da3f4ec25db73a7889fb592a30702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113517 Malicious code in eka-jamblang87-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388db0d1581520a11299f65281d089b0127cde9f6aa74266f2ead9c11afacefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113714 Malicious code in erwin-lengko16-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92cb43a9221a315640ab5d0705f055ec734cc03da6f9ccfbc30997b6957c266d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103432 Malicious code in gvbhps-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a735a8cca8e3e69b26842978eb87883829fd9eb815a25a4f9b2686eee76ec10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f81d0d2dab649ce22340bd57ec5829307dc3729e6fd26a03a011431c4b6bb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22689399251d3d885c8763c3183dfe2695390dcf7296d534a30708247cbe7a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94682 Malicious code in giant_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4206469dfc520321faac73bcb5e95023371c0a1182dcb604ae49324498005537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95778 Malicious code in ordinary_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f647e80bce2a6667d587510fc771d002c79b8a78ac6152fadea3f8a2cd2843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...