MAL-2025-143269 Malicious code in hercules-andromeda-cors-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0a65517828c759ef112b5679684b76174ea657c94c4adf54cc86b95edbff45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144245 Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149119 Malicious code in venus-procyon-test-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb79d6f006a83101348957e94c03ac8895c614f12e474368f72140f44f2a2491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139509 Malicious code in apollo-element-ui-magellan-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba972a9af2c18c32af8952189c8f1f93988448b04dfd8f4e96bace6ca92a2058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140905 Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145610 Malicious code in non-blocking-hapi-less-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075caf1674ff7e833f0bceb57dab4fd4abd685e881659c5f95b4ac57f926a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric-apricot-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e47e60b620642bcc95c5ac6199138001d0a1597bc928c020921b208827d026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-kupat1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb2a04b1fc607503cd1fa56a8c7a1629356aeef3c099bb93044ac7c7811ebb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f00bc7f3f9c64633dd657265566bcb83ae347de8036ce77e5e9b58c54ec2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-dradag20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5896cee31a12655dd5b979f43bcc85ff5859dca056c6a5d197445860b7679b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137445 Malicious code in tuti-ruwet53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b60e5e000098832cc617c7ed37ef56ddc797704e5b56f804ae2b3b4b2e8bd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134770 Malicious code in judicial_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d4211e95c512013d05036e5b2941d8eb072588a5ea6e62293f5daebcf8fd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134640 Malicious code in joko-martabak50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a182902db8c278e43c27de5224b368577251cd870e7179db047a54ff047200c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137784 Malicious code in vida-rangi67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2480b204a2169940182183495e49b45ca1d1a06680df034114a24d969ba75857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135478 Malicious code in maman-sasag63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96c3c94a48ef6f8845215b76a43674c8a5d0f88158b8c3bf2fa764e700dedc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132428 Malicious code in cici-kue39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dedc87dd40fdf52c612dd3b52f37f833c701a4e339bf1801aecc7028ff4789c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138414 Malicious code in zain-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1755f3a04bf14e1a8d1a6563b00ff4a089e7c6e13ef475272e314cb51e2e8e68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133428 Malicious code in fatal_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc93f843524b821f27cd95fffee53eef5857e00e562891124990deccc46836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...