MAL-2025-144072 Malicious code in jwt-figures-ora-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d01d7893c541cee3e42f365513a2171568f4818971fd777e268fd982ecb98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146636 Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140440 Malicious code in carpo-frontend-callback-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322ec4015b6527aab0c3603af097b5868aa95270eef43729041f984b436f921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138888 Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a005e9958eef9607110c0f64f54308d849c23afc03d853599a86c31ecb1078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132198 Malicious code in basic_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0da4913a632950b0d0105d201d3cf2a94d459a34ee81b1f7027e433372a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133478 Malicious code in fauzi-wajit59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a2f3e1ee474e836b3016759e51716118c8076127387dbfa34cbc772fd9c69f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135469 Malicious code in maman-peyek21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0907458b071738bcf54fb664c2d43ed322b0af1ab876cd7b69e4559fdb4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136438 Malicious code in putri-ronde91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6777fe78fddfa2a8bb9e62de1a3c9e767e3656b9e50e68e9b236241e51fa8399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ongol-ongol44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf4118ac5f5adc3afb23a01d5375afc7769d7e7d48991a738a6c2c9f82c3188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134602 Malicious code in joko-getas53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072ed5f7776db16207da5db1109dac1b6c20b52f1f5c2dd956dc26305f0b285e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132080 Malicious code in arif-esdoger65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13763b76475e392fbffc2b94cd88618cf4e3e196954ea71e08ae868057581ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134376 Malicious code in international_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bbe09a5563f25eb65c8b947a3697c781481d61409a145cbc4dca5a009e2537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134761 Malicious code in joni-soto20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28949e01b381ba41d8f229ea329e081b22d5978c1c0d96c6644528446a44ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135525 Malicious code in maya-miebogor44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2ddd411446bd85385834926ed97f5d372e12e6525056f2bbc51a0a132de29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138022 Malicious code in wibowo-bakwan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f928a4d2b8811a27256846cda3554fbb4ddef2156d6ca39ac0b8f8fb11d9fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134254 Malicious code in identical_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e663ac45c4d6654e7072b0a9e4d4be2b770317b7ae3148f4bc0ecfb14671036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137607 Malicious code in unusual_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f6285759814365a9b9b98b7654416a8b200884111da192a44ef93ba085c3f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134874 Malicious code in kresna-kacang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8badb8571149901c3ce8970d43df45a32fa04379f89d9e0f9bc56f7d13699659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...