Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147358 Malicious code in rest-nextjs-pegasus-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2395e16f16fd91bb12bb0f7ecc86de9d718432c37009b24b2167bd90ad6e98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146752 Malicious code in proxima-xerxes-phoenix-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa53cdb21883c83010f5b066e9c80d22153325969ee802d62fc3eaa81e6b529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140887 Malicious code in comet-procyon-terser-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b417566f91d2d0997761d52bf5ca6f8226272728c5e87f708ed8025832c4a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138989 Malicious code in running-chocolate-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffb77eade9c851555770d34c459c181ac2b42fd29241f721bf91dcd1693e23d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-telur98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f772091fd6554c09e83d5aca81dac0829449d318afa6404a027f9ab6b7c0d40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-kupang9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60446efceb69fba3b988ff6a456445f3a9a1922c4b483154a30702f666a5578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-semur93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 883b7810b7fab51d66e2c0396076958439046e4446177cdfeaac17a54c9b72ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-toge39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dfa12488248615636488db9dd70a744552c39bf85bff1cf786ec1199dd3149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-wajit68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ee7abfb38ea826d40dcbe33f827d11bb08aeef4199329d8c34e265139b4cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kentang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6bed8a265644246466391301f3703a02f0a749059776572e099ecb09a7211d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4ab58bda110affc7a2b890d902540a8b65bd5f237d718af979021f7dcc7f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-martabak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab8ba1165099cd85b58b402a24e57efef29ea0e078ea3dbe282e9a1cd0467e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-empal58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f90fca42aa4f901eac949da3e025deab773192bf543593bbdcc3fdd135885a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-bakso5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6edb4a223d36e7ed90dc15443edcff858138bfb4770cf55807a0f1ef40a5700c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ubi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341bc7eac6c3ee9c19aea8e44570268f442eba63f768c11e3e777f187adc1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135604 Malicious code in mulyono-gembus32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90902369b12b72ad94260ee3ebe514513a1ac93be21a544cb181986177200c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-buburayam38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6978221cc7c900c93e0a37080500afe84bfec1348e795992e10a5f9f3ff45590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127804 Malicious code in joni-keripik79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c684a219c09d93ab2e235a93c01e524801eb737f1b939be2383a6a46c02613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-menjes78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e297f2c6bbb21f83e3cc590115db570080cb6857cada251da78a31cfacfa0b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...