MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145511 Malicious code in node-config-jasmine-sass-loader-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71be3c59e0dfe748e4027f1079b928a11014eb9ed0dd0db124e3b57c425b16d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146451 Malicious code in postgres-websockets-rocket-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dcdb7f97e93a2c4c9871540388ea14fb05fd1fde3053439339b3f20b7591e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141008 Malicious code in concurrently-koa-jupiter-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c406a48340215dfc297931ea310432a4f8af4887c0ac52bb24dc2a6d0c56388e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144375 Malicious code in library-fornax-start-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996122074b551d003f4ae780312aa8b69fa116ed2866785630d4311392eb7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137547 Malicious code in umi-lontong7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed11b62d302a5643770366c7d0d594a7ffb428acc23f98e84cba876eb6b72f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138012 Malicious code in weekly_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eead04368776fdc08b997d1854f977d54a0513d43012cc9224ebc42a8f32a5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133344 Malicious code in fajar-bakwan73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474d1f624a861e4804be0809e0198f60dd41287b4c84b692df913f7739e80c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138234 Malicious code in yanti-kue99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b6d0c0dcbd0fce0bb8eb4d921381a5294450ab4daa07cb0be3146adac80b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-empal4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91525addfda8f1fd840ecb5031342c3bba614aa2166bc658c6373afafc86e8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135850 Malicious code in numerous_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f84508971369158b3419623b82179d16ff5c26ace09ff21e20d7db5d704670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-dradag51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc468f99f4845f9d1eef80e5961a45ee7be749f9c512af516df86ae6b372196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-martabak64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95c072cc7213509f675809fcd1f05ec874c1187d5915db1dfefb718775dabf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134946 Malicious code in kurnia-kue13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfd0fabe88b4f0ceebc5c255bcbf99835138107846aae37d087c194ba28a08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135733 Malicious code in nana-kripik55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9a36f71564714a5e1d279bbc9570f3f7f6ddb7eb31f77e3f296235db24481a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138331 Malicious code in yucky_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9fe148425095b4367aeff3abdeecfe8b4f36e60690b16bfe84a5281d3f4f37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-taiwan74-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91794b27f04d9278bf338eaabf5b437e85b9efd078606c49862d7481c52b55cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe355dca69e2d2cc4fd86ba6ca73f02cb4f13390f6c615c0370505cb4580e349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-nasisayur13-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff96e5c963e7443d41547d49d94f867f77c9f408571cc518d1ea8cff7118c149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...