MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147961 Malicious code in sirius-loop-axios-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81efe827f5c03793fb107aafce4247391764affcb9f2d64a7af4644870207ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148391 Malicious code in supervisor-corvus-css-loader-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e717c0a7c2be48cd214be01d42a303508b2d0dbdda6904c59955d4168e4f36a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140098 Malicious code in bootstrap-blaze-betelgeuse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fee5f7c3e2acfbe7402c84173336a1d9eb3ff7a298a28a3038a72366844dd70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-keripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2fbd4763ee31ce3d82c47f68729dc7f658eb8384438d01c44333b58a85bc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-tongseng38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a4392714167df332cfe3518e619f93ea38ee6d1edff787e057c503518afaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extensive_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49e056610c97927367ba3c922af24d61986a14a478520f56d91a95e045ff883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-wajit59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2f3e1ee474e836b3016759e51716118c8076127387dbfa34cbc772fd9c69f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tomat59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13d6f2fb6702e0419517337cd6ebacd3c83e856acfbc14785592d8b2fd68533a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef02c4c3eee50582ad360446fab6d338b61c342d4376066fdae40143f8badf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-jamblang49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88f91e468671f3bdcaf98e3de172cadaa29d8b113cc9c8a27a3cdd4b4a5a625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135491 Malicious code in marxist_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d885fc36027fbaa0a204d5401a45bbb4bae866bc836d82fcafc63534b822a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132259 Malicious code in bella-mieaceh48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be431a239fe8a79b2aa82a898ecad3382ad4050f0bfc5a27f46c21d62629b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132367 Malicious code in candra-keripik95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2fbd4763ee31ce3d82c47f68729dc7f658eb8384438d01c44333b58a85bc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132844 Malicious code in dian-telurtahu26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d522b5c59dee1c060c19f5b2090fce6c81feadd8955e6a8944548e17f820e6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138088 Malicious code in wooden_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8054c638e9d54567e17b989c762c4219275d9f996d0e0f8eb02d69086cf8e9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137356 Malicious code in tomi-klanting95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe81c67f8cae1ddc24d4c5c3bc1f0b25b74f5fd7eb4655786e86346b567b60c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136015 Malicious code in ogi-sambel41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9269c3c25efc45399e8af950a443ad7c0f34d67db97828a4816ca21408cc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-tapai97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36b40a07dcfbaa8bbf51eb6e7280240c07ca825416a4cc6fd47221261a27989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...