MAL-2025-141990 Malicious code in eleventy-aurora-csrf-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bd61603a8d9897e58648607455671c4b3464648f4a3f11093edac31e0a73c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141688 Malicious code in dorado-ignite-kronos-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66abf121dfd2cc9376e533592688a982b3b97fa45c1a65d3d4d3d85a8e1cac52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138861 Malicious code in mature-beige-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b58ac1ce1747ab82066cab5e94a6bbb54369ba4c18c7646b95d182045d2e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-amethyst-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6486a5d43474649c11227f0aeb85bf1a69e39679f755b9069d017290d3e1f4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gado-gado86-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1daf77eba80c4757091526ab6cab03cbe53f996d6a847876ff913caaec9a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-serimuka52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d41428857a7da3874149232297c651ba7e598fa4346f3cf57b0cd756cfba3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143319c283d109d52d2a33f42f17b2876027e9cd7b2cef5ce20654e7e78ba425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9588bd5298ae71d3e6ffa2fd6e153a8c2fd654a4b0a6a9604e58439ad26149b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bde661d3fd85ced784e0baa0164bceb1e4787f8c5a5ea0898ef0d3415009441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-kue83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d2479793bde78dcbf7e904c847e06b888ce8a3669b8e35c667aa5b63b92156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-takokak62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4ffdd69488e396f2842fe0a39d3d5258363985673185e8566123ae425e3ce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-otak-otak61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54931d8eb33a133189bbbd8dc49fd7fd8f67dbae591ac564ec5cdebd71fa690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-takokak43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5483b7220cf92e63632540eb66c9d3b0ced9642af0befb1bfb72adf3fe8105e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c98420f1f0956f46ee0cff4ca537adf0297c642bedd07aa79ef4b14de7f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7818bf2b5cb989310fb94d2d029dfaad42baf0102a693e3ce9c71112cba0cd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-liwet20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db9c5126290b944eb533118a27ea8e50f3704f4f6548f4e506e2ed7a61b4a21f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138324 Malicious code in yielding_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74102022b39b7dd365f081d598bdeead20796d0e97b3845df7ba6fae7719a035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135982 Malicious code in ogi-esdoger47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d8a250c5d864937855f89f79052e364c02c5e838da9023df4f106e7af57edb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132853 Malicious code in direct_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb8ca5cdb8d9099c72159f766de314e2fdb3a4003193aa64cf2e4e732af8c0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...