MAL-2025-144351 Malicious code in levels-carpo-fusion-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d8d5f23e9140fa627019e2ea08fbc2a8abf4e959025b337ee09e444f301e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141650 Malicious code in dione-spica-node-sass-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149235 Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer-apricot-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c223e8b64edca33cca40bf70ced987c14eb549322d8a5fc3e01d44c5eff6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-lutis46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3e77f03e29c5c60c05881b46ba0be561fb3f118826231c55236bf1bf2a16dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adec8018333b49cd4b8b3f5c7d27160f14502518f170244e89ee415e327a918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134378 Malicious code in international_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a383f691bf39d8095df1984b160a42950d168c4231b8a2bffb70045c246856d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137293 Malicious code in tiara-lapis38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586d9ba5366b8f93792c511cfbdffc5e7b5164391e5f477b58e570ac78f0931a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lutis22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbcb8da06c8b6e5a4b62fccebacb00fd25e2c6eb7bfb8a54e6e8904c307c35d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lumpur97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84509467dade4d5f5fac403a0b8b1fa9b297071d30660ae3506625a065e53691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lapis29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dacc665d00465348ae5f86fca57d39edca5b42a6acf78e8bd1422ee59e6eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127335 Malicious code in impressed_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c100e24e536987edadd43a1831f40bf35f81b09e35d0bd0c7da9b742bf18795d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125457 Malicious code in cindy-soto66-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb104e060dd86d07d37dc9fc8d0effb8330f01ce6e74aa897c14ce35b0d5e217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue60-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c9e2a78922c4abdf8690254d9970c1d2328bc89c47699d5c2f19342ef6d622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-bakwan94-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 657fb5fe38da756e2e2ab40ac89dc53cfe3fe9590135fbc5be9a46ce77fa8238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-rangi74-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf252dbac6694dd92e117031226862808b794b60e80a749d3a017bcded0a5222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-pecel26-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aef754cd99e2f522b952b3d6096888fef2b1164da85526ea4825627f298f14a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118160 Malicious code in xaver-rangginang55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d495a1f52979b02732120282725367cef50d77b243cc783c7065fc59e5caca50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_lamprey-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001811cb1364a5e00ef42ec1c7bf44c5555bdaf3f8475f3bb22bb3591949227c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...