MAL-2025-142767 Malicious code in gacrux-google-build-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e1026076b8776a5abf64629bc49bf72b89ae170bac59cbe6d152fe94085f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5038fe2a3c36f89c8648d1958ea6266b9e56a0ef60f2efb00d26435c3e79a2b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146939 Malicious code in quark-toml-iota-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c32721632d64f23304482bb6565212889262dac6c7be4198546fa527e9be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138981 Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-tomato-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cdfbc7391bc8518fc084dd05454910e1f90cd03774a8fbad364eee9ed38849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright-jade-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7469f2a081d9b88657ecc464dd738f41968414e838c4721031fd172da2e3154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kacang40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728f76708472d1aa6db7ede2ca471b51dcc633d87a1a7564bae8b651695a11cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cdfe9eb82955de6c60f0fafac9002e0790f448850ba21b127e1627ad37c6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-bubursumsum33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2372cc6f9cf72b7472e5cee2748229456e5d20ef36dc523f6591c6abd619a1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2066cbfa7d3cd212d9218e3274fd1152b6b8727c29379fd709217ffdd67f107e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideal_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a5eba553bcbef431b5c6cb19b67a1457dc5b3568fe1ebf33c815de5f9ec15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-toge82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a951097e5e8104c62775f84067ac09d56cdca5079980c27fd0b97eacb8b600b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135342 Malicious code in magic_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b795394bfbe606b74522fae353412a59175c831336324d122f9973af341b9f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133397 Malicious code in fajar-saguer78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7654c899cdb8227effcc4def66576d31c12f39803f708df22b777b93dfbc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132132 Malicious code in ashamed_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bf9870c0ee1935d55e20edd4ded87ab78d780e0dfd5cc456cb40f1fca278cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangga2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49742003fd912b27a4bb9c71f8d8b3780287033ec9bb93afc8dbad08b18cac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...