MAL-2025-160302 Malicious code in messi-buysa-tusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487aa0b56711975b15f16b8382de878917368c377f3ca44239dd73fd14849164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166505 Malicious code in syahlan-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1b6b7d3b15d9736ecdf829744293fa4eb8b187953a5518e62c15e80c60d5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jupiter-sqlite-centaurus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16783791eda5125cdf43a24b575cda8da3c800a4bbac7fb2e98a57d8475c7841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-metalsmith-cassini-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb8c8766f8543981afe7cd3ab173f90aefcaa4b6b7fbe5fbff2d7b9838cbc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144086 Malicious code in jwt-spectron-global-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19c70db984d25aa49a8e055559447580b2522c142759cf4f72573777240e58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148120 Malicious code in spectron-nextjs-element-ui-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0061303e422dc557f76edb02ddf4add87660df7d1e7b5c1ba2c1410f24e5d69f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-typeorm-zenobia-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175557d4a655d5cef955077dc02c69a555f4eb2aa05bf6aab5889a1e6289ccbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144819 Malicious code in meissa-ophiuchus-less-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8518a814cafbac1fe3b24bde9c440231a89ec97e3377a71c305e1bb5c795f498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac8894598bc3579ecf8c70b749317c9a799c66c5d7ab05f7379a970b0642965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c7b1964787b4ccde214a668fda33735756b106058be8b3d330168bbe4a59a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138270 Malicious code in yanti-papeda65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f799d1c6b1f1cc58919123a9076604579b5644f7eac3b0c790542adb52e482ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mendoan65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d7306dc2570d9a2443ba4684cf36e3df34e61080e280bdd26fb7d28fee6589 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135651 Malicious code in mulyono-toge82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c7667f424ee84e63b5e18d5b7fae2129f72f7a4b6ed09ca3662ebe3a2635b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136415 Malicious code in putri-moci58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3134ceb98bf8ed05c462cb28e0fa2f9543a1bf19864bb487bcd88654e1ce624d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-semur5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027becfda0745a9eda5b7e3cac7add482cc1ac6413f5bc0762879a426131bb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-semur34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7586e46505e9ddc47889fdc9fa6e4e94051ba05cb4ce6c5e4eda1839562af37c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1f71e1e3a432937c0ed89dadd1188fab4c51740fdddd32db14cba56b134283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137783 Malicious code in vida-ragi74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eebf98bc271b4716281d1dc06bbaed490040694a8c931a0ad00afe87ce7041d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...