MAL-2025-151674 Malicious code in abyil-nionai-lasuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26a857d83c5e972daa63630bb53eb230d18c82fd32695fc2cd27f3b20b7cba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-backend-solis-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47debd0e472e359f6d7a9c6d07a2396dd62b9eed5f75d70e652ee1aa399ed61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-redis-axios-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5089f5ec78918d36e8cca7d30a931bb7042a82580de245074e00faccc56ed2d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-lint-alphard-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3684fd38755e805195dd3647625892859bfef3ea8e3c810285fb6382548a89c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-cypress-dagda-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9480eb72fd64424dc78d7a68c04b3407ef3bb591d0550aee3bb1b56a326f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144685 Malicious code in markdown-pdf-backend-colors-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe31e1cbb1c5fd3376f119da6588501d97b4a992ebe01652d4b12adbb4e28e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148316 Malicious code in stream-galaxy-loopback-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d45ae83d454c1dad43cba0a2f8238b07627a3bf01f9330bd8c4367fc4f2241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142675 Malicious code in foundation-vortex-semantic-ui-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326fc01021205b3e567805f4fd529b0b14559710cce5370242b5556050f9648e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-wajit28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d376a752bddbc6c183e34b074758465f8e36f80827c124dd3e64e774341a1c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faint_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ad9d2cc2cefbd570efa2989f57c339be1fc717c6eed3229d5341ad84a1b216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134438 Malicious code in irma-sego28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb361a7ecf4deec91963b25d4b3e72e9996a15972348cdc5140d8cc321f658ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137095 Malicious code in strict_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6938227cab2a8a155fad26e9877ec83cb960f653167374a61eb536183ea4cc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132366 Malicious code in candra-kembang91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0688f6145e867308c2d3e6884e6e46f6483b1b1ec1851bae1cb2bf6aa431a3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6386c8962b149177ae5113bef2b534af07b9e2f6a572083bedf2ce41262c0e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gepuk21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53aa76cda196b46f50c016fb2425da46278c795c0cc2334da918696dbd3f014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-pisang74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2f76b989b3ca183056073662f9acca7174da22aa92afaa26cfe7bc812e958f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-donat85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc075d966ba95e70bfbb0ed09af87d82f5f2bd5e32e1d5d48d85c1795167cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126711 Malicious code in galih-tahu76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aaa47ee6efc47053bf1cffbafc2b6ae1c671ff491ae6188134ada7b14654d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130200 Malicious code in siska-esdoger44-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731158de8cffd9e794f2957877aed17ffc030fca17adbfc158109958ea0a744e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...