MAL-2025-140884 Malicious code in comet-parcel-gacrux-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e2235f95a543d9f2a243f935f6bb11f97b4eee0e450a4f955c26966cc1f900d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146060 Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0855a6cdfae8e1670a3485cc01494e3bbcf29db65d753f2584e2bb3c06e422b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-gembus11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891da97aacb09e895639afc1efb0cc7ddbc6eb901a8310f7e28671b3f8ea9df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-soto12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496025aa6b380115dafc821543e27c6f14a303ba0997e10251eb059f298b75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-sate48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ec82f1e35860705273d5fb6856c01cc1848d9b8ab7b51edefab5bd072d8c75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-soto46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eaae0480c4c18888aebe98ffc66639e93bfc6096856e688450980834758ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-klanting4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f5dd006d8508094afb5e4fa2c48b819ef88fcd427405511fab3855508089fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137808 Malicious code in vina-donat86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98191b60f66179ba449123b0667a65639484721a01a096c0842754e8fd4e9e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134107 Malicious code in harsh_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba4a889d495c290675bbe403ec2d4508c26814029acc83cb5223ad982d1023c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tumis29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd3857e4f5ac9a578da5c0f548be81a5578105fe26a5dee11ca9c923feddfe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8ae0443d03458b857f956c00c7774e3b64eeaafd58fafa8723acd0b2e6bff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135696 Malicious code in nadia-rangi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442baeb42a2f367baaa172e4d2a4b3b58511a7034c68d0d737378f850583094d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134066 Malicious code in hanafi-klanting77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a535e0e3cff2f1797935213d1baea8904bd7347526c6e18003284302ed3806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130295 Malicious code in specified_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2283cc56bc583421c89902b6f4c9c1528e3b1bf4ca1b4639ff7e3ac05dd2d279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126067 Malicious code in eko-dradag35-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8bbc0be07ce6935d06182be98c1a0c0dbf62817641b8d261d5999039ed058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-naget84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ecdc2a9674c123dd290e14e34de31877ef263115f8523989092795530e6f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130142 Malicious code in sinta-buburayam51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982fac8a2a2220dbb3d1226efecff7ef67e3ce2ff0035908bcb4643b54495f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128953 Malicious code in numerous_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c169755c16ffeda632fa7e64c6be7e1efb625330b25b8c6b48ef61c3d6c63970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-teh19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 779e718c9e4ede3345d49178c9b5b1b5958fe352c548b1dba64fd4912f29413a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...