MAL-2025-149735 Malicious code in xml-start-cosmiconfig-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91eedc1264661a331bb5bda407d0b16cf6ff42036d0c67981b64050be0744e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144982 Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd7abf768c17dcc0e5b07309564f07f447feb5c1795b58c7d519912d70485516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139778 Malicious code in avior-ophiuchus-achernar-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8afd34c176b61d18d2d2a77dba4d88f6eb6df7acf0d470be7dc7463628e0a0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11339a36a5f77740970dd160221550226fc910e3828be986cc73c7d7ddcf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gepuk75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97235d0007b2dc2ecf395f0a2040e424061dde3c315a64e2c2033ebd6a1192b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bakwan51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b449626d8fb1d19c143b2221f5c423b0bcbcf8058ecce261bbf639ead1d3338 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c73c4ffb30824591444c91fa2c25e3122e493fd4f99eaac3997d3bbaf14561b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc4e39a19c9e5d1925ca86749fa7f34835834e37ab4b018cf36caba47c14c4d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ketoprak27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7171710757c26b5caca4d39a90c471a4b09ad07c64ae869e3a0d133c3f407db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-rawon85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ebd7aed1ff1a20e85b42cc30c2ddcef84ea6d5e38bad1760fe2c0a39d40154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sate42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d3538ffcdde19c731b6e799ed9dd7fbffe5e77618ac3e101c7adccb27de975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137162 Malicious code in surya-rujak51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0e0259a3bab14632f8ae2e922c2c4184a9cf39f3f064c8efa769d006379133 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137886 Malicious code in warm_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3140103a8ae5ed88fc599205594e17f8e63a151d5ba7e00b1de6828790605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132090 Malicious code in arif-klipo11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97704248154bfdf4f347b3cdfe8f7b8f9d223d4ca2231bd2a580e8387eb584c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133645 Malicious code in galih-martabak52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d84b2e2d21746bc849c87b46b99ea0005ed7e93d35b50784c0bdfe100b75d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133695 Malicious code in gilang-bakwan80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6188a7e03c6629232c5c2eed06ac74247e8166254dc9a566d7e0bc18814e5edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136190 Malicious code in patria-keripik69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01020cb09a41f96facc7310f85482e89b817a55fe20fd8fb1df281afba533159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137088 Malicious code in still_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2b39e2010d565a1dbff215b5bc8c5a42ca067fb71d7464f57f0a219c326644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132658 Malicious code in curved_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f790d9abf955a96e6ec07c85507bc0e37d25663bd27898d450477255e333ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134821 Malicious code in kiki-otak-otak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc2d821b31efe8480693c3923482f798976bd16a5ad56bbe9f1f00983c0da80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...