MAL-2025-142238 Malicious code in eslint-plugin-public-forever-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0d03336e11c27ad162f3de5c4a1d791e7294c5177763e8c8499faf2ded3fc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146785 Malicious code in publish-gulp-nestjs-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8834abb9c3cfb987d850c0ba81ac464810cb8d694264d1778af4b4e97cdadc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9213916c32dbcda8740aa4a566e4d8d5f3b5883f9492bcdb22ba69e39195f68c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63143e819b4e036f1a5d8bfa56c2668d775a29fdfd924aa0d656f672a609ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-ronde4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35e672ff5309b771d11834388dd6be00ceadcfea5ec55a8e5b57ce1bd1dce961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-nasi74-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fa350bcafd661c12b864dbe0c48073f6b998d1fbbd460eebf8cdfe639795a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue27-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bd29b590ec9cf5c9eb45d6c27c1a560d1539733f06486be55d7a5882302105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-pisang76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11bde3fc3097dcbf9029d87eb8a062549d9950ad26010c4f8bb348e9bd3d7790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-taiwan63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de722874047b6d2afe58cfe689885e46adce65abe8d8821a82b490aee06f3bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-buburayam75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a33b88a4b3dbd825863bf266abbf4a5b8712ff350e20052fbf37b978f74c996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136313 Malicious code in putra-kacang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9fa4ff6de643b0b6f60649957aa1630eb9aecd2b9de1c292bfbd59120f4bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133602 Malicious code in frozen_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0806c4dabf8f9ff2a92d670f6308add498eebb1c9e6895d8f688f3994a722c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137803 Malicious code in vida-toge100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acd4a390585cf52be5fbc8e1e4ac679255bd142ae02356a384a5b94543d0840d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136198 Malicious code in patria-kue72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f78cacd4dcb044c559efe5b3281019c39e21a3750bee40666bdc0d43b9aabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136697 Malicious code in rina-gudeg47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308bd9b54622bbe165c967fade1702454cd2166f049026a3aac6c341d09dc8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137274 Malicious code in tiara-enting96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15671ea448db5c27aebfe4fb63037faca54078f916a921dfb41c7521612ef3d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134240 Malicious code in ida-nasi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0941e7715752a0736f8aab8193d00db5c7f7e173667ecbb1c60e21ca5946ea9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138524 Malicious code in zul-empal32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec798f2a790d1c3b0d028b9981956218ef01d73ae2674c708eb74afc86e5b7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133011 Malicious code in eko-asinan81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d30e53323198af3eb6b1134786bd1eaf26050798fd106bb6e4d9a81895b3896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...