MAL-2025-141270 Malicious code in cross-env-sails-pino-pretty-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff472b53ca019f8b396f192549d6ea6ac94ddc96058c84452a9ba0390ae1bc7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-rangginang82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85db38f6e76cdc3a401bc0b5a77ad5a5fd80ccd879a0cacfc784ba96d3ddf0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-donat55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5075ea0701711288208a674f80d4afda142902322571f02946d99a53ccb11cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133841 Malicious code in gita-otak-otak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d67d192cca6c98400e679f126e00bc5bd6096ac259cc1d479a9d2dee91fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb0257c049200406cc599f60a3d4f3881a255f6d2fbf45da8fa16f45d50aa8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-menjes65-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473c09657e44b2031c3c590c930634c83ed5502afadd3f02814729ddfa2d63ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brongkos95-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3b875d9e523a5faac066e49e730bb7438b93959dc6de1c42a0f64d19096efa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-bubur34-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c5b5ef2dcb39ea45ab5bfc9e6eb40fa4d1e3e0319d0d3015e743e4cbbafa6a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59027 Malicious code in tuti-peyek81-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 758f6ccd7ab7ad713c1d7660d13fee6787bb2a490718fe5b73e8f9488cc107bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...