MAL-2025-140085 Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147096 Malicious code in redis-atlas-docusaurus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc6739e1d77dd79766a095815817023e3d3a697933689bbea3e6ae70e215443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146713 Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bff0b2371c9718a62b45c8b461c87c10eace4b9cd803171ec8c16ce0a8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142982 Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142220 Malicious code in eslint-gemini-unuk-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaf8e815ecc4104bcf4c757eb068fddf1c5f5ff349a062c53fdab37fb623c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147244 Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148762 Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145850 Malicious code in ophiuchus-vulcan-quark-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0d097941e96216c73a95323d1fdf14c3176c5863361cb6c73a54a9d94ca387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b25b2db06adea8332740dd3205556375e1a92751cb64a659cd7ab8511567707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b32cb008dddff5dc668d212ce339b52c28cc4202c654f3985597d6786eeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-tapai51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c998b31920dbee3fb51740e42cca76ffe2857ed9ca51b2883b90f76230185f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9def6fceb456b061c00e498a11707262f85486cef1aff1695db10f81d7d4f341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134809 Malicious code in kiki-lumpur59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738141615c68ad459741b1b1f75c58819d65dd110e8ef8dd61dc8c818f81c78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-wajit19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b9937d10763111e14f78008ad4cf9ea2d01e8e526da51be601277f3133b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129478 Malicious code in putra-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1fef17ee4c5f641a5e7d7ff3ddccb56c7f8dc9796f164c2e631c53d701c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lutis50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ddafa2956831a4dad7b775a14b8b8529e29a8d7d86617bfd6c0d02ce262e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-moci37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5711fb8f8776ba97f37c37987146b349a7979815ad0e0467d1f7b05e7adc73e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129446 Malicious code in psychiatric_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce81baf0982b4215452c8d1ec12e58b234ad8d72b63bcbf672a2b4573e96f88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...