MAL-2025-144284 Malicious code in leda-phoenix-bellatrix-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce266d563d5b2b900c4c7cb63fe1324d5f2f43ff6fca843bfff590fc2a4e0423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146200 Malicious code in phoenix-lint-staged-auth-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9f820a980eb156d3ff985ab85292fd261b3407f266fb93b0a158d2adb95784 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147723 Malicious code in scorpius-yaml-ignite-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb26d44d2898df0a6ccdd6b1b5623f9f5e5a5d9e158848b37bc4af1d4ad9f6e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145594 Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148501 Malicious code in telesto-release-it-google-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ccdd5032ea5072b6c78227164fcfdd6caeffefe98b43a5d8156d92454dd74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty-orange-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e043015e7dbc9ad51a628906d4382c4934aee4fc3185ab47b822fc934bcf39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138805 Malicious code in institutional-violet-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51eff08cd719ab80220636bcdd687e5e99fec5bb37ad6bf7cf2172954a91741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138995 Malicious code in scornful-red-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18b46222ad56058a14b9ba315d2d0e6059319d63a2237f9869a98de121dd992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3320e8a099f9c72a2f3829b15c27bf98b94fbaddfdc4110a37d0a87c2faa4f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scrawny_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0dfa00fedefa86f08bfb4de451d63f4ca479fe7d24a1edbe992f175f8b11e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-klipo8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc40c80107a9c622b1815c2102346d72acaa46a55210828f93bfe4980fd973fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08bfdc0a14a3c8092c5296ea5b7ec5acc34ebc0fce78efafbed6947051b6641 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-telur37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838b020dbd27b9a65f0b47aaefea8c61a736353f099782b04c96b62551ad3d47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134016 Malicious code in hadianto-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d407105de245ae0d991b11a0f7f36365b0f28c8ed667c694c0a7b8b89cbd508 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137844 Malicious code in vina-pecel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3e2e366353e704c7541f0a622b8b35d15ce06abffbb4914ec8380023ea9b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136303 Malicious code in putra-bubur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c710304fd0cf6d0eba621cde206bab8a25a3459c3114985b69c73be1555cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8ca5cdb8d9099c72159f766de314e2fdb3a4003193aa64cf2e4e732af8c0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-bubur65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099bab7bf2cad3da0af4a6b6f0c6704966ce0a4c9d7b75ca8f25de57b2d84ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tempe26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad05af760996a17a47c02f66d94e6361036dbd128c39859b052f755cd6f4e0f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tomat8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bf6116f4e63e0fca65943d0ac151091f1d3a9da54ba2b2908e83165e8fb595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...