MAL-2025-143336 Malicious code in hexo-apollo-janus-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05007f5fa2858df75a8256dd3fad6c0555590c1cb53011e0ce7dacbc72478c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139862 Malicious code in babel-inquirer-luna-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38df1c945aa945c9dd792f46532d5559c541240ced77f7885300dabc208c963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140326 Malicious code in callisto-cli-galaxy-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf556bcb08436ef6833d0ed35cb9b7b1780cbd5bea5d5949a951f74bd975cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141627 Malicious code in development-polaris-lint-staged-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c638e326aa053f682240e547e9f90a7b769046b2d21739ef3ca2efad26ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-cyan-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69618140d95a93dd960616e1711555b0dd44e745b6e3235bcd933d5a4706ed9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive-scarlet-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d625dc8392046d7f079d2c9f470edf6e05d3884f821185549c04b7d8a46d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138757 Malicious code in gothic-plum-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a609b5dcf10477d4d9e3252e4994993f6206ef46bb9c00c30ae5de5ffc8e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-nasi9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6dd7fe5e5b8e7c2708989237324d0d01ffece4df375305c5a604b6b89a7ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-martabak71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a12de5615ff0c3fdccff33296a3ea459dd96c0933b141e825da303cac66666 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3704f353940e6e288b479f2e753b8d692714bc95b7b207e16e4d968e166c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf4dfaf084bea5fbe6631f312cc1b90f2312c0cb72f3cdfde5b2b727a3590c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-saguer64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096ffb7cce89312a1f05740a97eaa4005c14f07f3d5c212e1279531390bc11b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-brengkes36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b703f5e6c450830a5d86e49a7af32aad53cf82c94c7710af6d3eeffa7f0be2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-jengkol9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be4045dd9fa6689b11e9e48d461af85195459db10a5bbd993a0b851817b6a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09ef63140a7cefa864a2f8199b0fd32413b52149bf6973cbbb595e99aa0d74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5fda401863e48a1b0104f9fc154430f44a988faa89f6a0643efe2994ce84f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698c8312aa46f9af4d03d0e473457377330bd4ef4f9c30293dd808fbcc1a1cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-serabi21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 884bd8e7b720279568c80f9d5f116d7bc41f29aac88182d47d64f26ad4209633 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...