MAL-2025-169322 Malicious code in trevora-lisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a03010579f7701606e5649ea2c9410e03764f39ce5ae787fb6f96a0db7681b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160829 Malicious code in muklis-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2612d0789bf6711b5c6a32a44a9ecc99ae2992fc85ed12c5786aa6b21360374 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143859 Malicious code in jasmine-nuxtjs-terser-webpack-plugin-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122079d9ca0cc4f5bf4c3860f735fbcb36bfc6b3b7d1bd0a7dfed0b6c375c88d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-neptune-telesto-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fd2f930b41dcba2fb86f7520b301510a5345895d0d37918b00f721db9fd953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148423 Malicious code in sync-envconfig-apollo-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0522e5416d0c39f55f4726793f21f5ee783f6cd714aa945b7a8b701df0ae65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142036 Malicious code in enceladus-rocket-centaurus-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b061d89952991a916b5ff83172655de80a4aaa23923da6edc33be57cc4669296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147189 Malicious code in rehype-testcafe-iota-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7d5a0ef86d9d1e26796efa729b64cfdfbf09a3a2a2669f32d1e01e0b38ee963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138611 Malicious code in clean-brown-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667b6d921aa0047b0df7ef9ad2f456d4611b1e5776c9f15df357aee012618ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-rojak92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec42a22df30485e046b40fa9c8f5ce70505a4f2b805737a16e072a336edc520b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132436 Malicious code in cici-lumpur35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4c70a09f72c69e3be4b6735eb3482e8233124dcd9b0c67a6cffb6b929639fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132206 Malicious code in bayu-getuk14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409f52a13fa2f44ee87246de38e9e4b5b3e56310545bdbe7e4f00c3e1de661db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135235 Malicious code in lisa-lapis50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2173dfb9ff60ff827acd098c4c30769819aefa4845ed198c7ac59db235e2444f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a755bd01f7be49ed32d4550571a1a8c36480e5446155468b7cac5e363890485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125133 Malicious code in bayu-peyek11-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e55ec2d76a7f9e92e89c92ae13a6d5da4b840724f5bfc05b9be42d431d134c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clinical_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5339f4d14801d1b406b1c2b3e5c29153dbdea72f1cef2897a45e3017e26e57df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-bubursumsum73-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0968c22cda5b9fed23b581394b9a61724218b46c16e3f2b55b578c27aa98f979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-lapis92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3dd4d46acef2db5a0aff130df88f6c272b19d0a940e403faf59d9209ac51a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121820 Malicious code in maya-pecel38-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da9a61c61ef04a8e0dd32505ba16b9a7f860522e596146b63be491139dda8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-bakso16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8873c80a665b896d570c3c2bb245dd2c7025ebbbc56919e0b84c183c2f6d4d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118714 Malicious code in andi-nasiuduk82-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e19e7909d4878507a22437b4cc548604f7715a720cc9ad3f08275cb3d388017a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...