MAL-2025-149073 Malicious code in ursa-sass-loader-orbit-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 299b64b0af89711f6ace77bd2eb74ec7ee22b886558ad7c24f690a3b16389dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146982 Malicious code in query-ultra-foundation-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5c34a8bb4f140d8b1c22dc64d5bd563c9a1e102e0768876da83550b8f89365f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146378 Malicious code in postcss-airbnb-query-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8a326112cffbdc78e4226c40385297d39c2cc350524c8450de4b31660a6a57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141377 Malicious code in cygnus-publish-apollo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c03f11a829c2bc6b90dbf8fccd6788100da66f690ac6c5aae274f08fbe6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142380 Malicious code in express-janus-auth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af4e08ee61507d2dfea640b983f7ea3e33015cfc6e4b78590648dd42816e764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-soto90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e48897f4e32faf9c2476282aef6214354afd1ff6c4a6c51c10e7cac584bb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca63107abab09b05e9fc3f6f488834ba2e527eeef62b942ed783467c09f664b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07837b8e2e2ab6f5ebf03b2f54fad634e7df44e172db154d6ba261e386594a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-kue78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2f0b5de600e69ca2adacbb2d0fc187b86d6eab93e8b2954dc5a7d65a05b124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-sate89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d8716ec0461cbf476e5a11de5d9d18f52d8b49eae113009438b4d678d7dfd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-keraktelor72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801c65673057ef407a1082847d8da803f2e9953bd130989f5ad1e38655b3babe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-bubursumsum14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a84eb1574986f158dce7d9c4c38b21ac8be9c1182bdf9708c71a7284075184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131597 Malicious code in yanti-tempe42-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ea088b8aec775ea6765dee5470d12472f80d67604999ee57118748d4be832c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129780 Malicious code in riana-nasisayur99-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d5c95ea64809277117f655992716a0d370cb3fc7b396853cf2b144f7347e2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126490 Malicious code in fauzi-lupis46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eced49d12e20c34c5699ffd8c27de2d7212d6d28d1fcbbb85cd36582a3a5ae07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-asinan18-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d91ae91a76cfedb9ec29ecce31a3c3d3a09d3a247f6b4397183fd918da1381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kripik59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce261e499c461ef8524f3f823b2cff5cca31b4b6e2dc1cce190dc03e0d8df9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-taiwan59-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7581b1fb6269e51c8fe5f19acb4d0d598b9477c6c4db1cec74566306756301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-miemee35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af631eba3b3081c1b586fd08f90dbc636976813f73bd97670b06996ce41b164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120462 Malicious code in hadianto-gulai21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb39199d5ce190925e26e1bed6a006750c8ff3fa8c66e35761dab8401d9d2df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...