MAL-2025-147704 Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140400 Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145520 Malicious code in node-config-terser-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd32bf25b58a06b2a70d39b030cfa34a19bc7b9c33000beea84c94963d55dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-mini-css-extract-plugin-carina-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0600f861e5c7c831867f5d513940f33a86c60daf9f02ae87e935468a6bb3d6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138863 Malicious code in mature-olive-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138685 Malicious code in electrical-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mangut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286e0e6c474cf19e408647baf5cc78fbc6b6a9af7bbfe6895d6d1f8d519a272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahu92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a437c1fe096bced621822222b8101d79dedf3094ec631242e8a6b7585f2ada6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134152 Malicious code in hendra-oncom75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05815a4289924c517e4adb60b315b18ef6b672b6174866670dc4d8e46a11f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137698 Malicious code in vera-gaplek47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b462e5ae36e628740bab7801755f1181b79595ca85dca8709ea8b2f688a6b31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d53e57ee07f3ac26be5f934a44b24ae168372f7eedd4aa0b5ac102df3cd1771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tomat63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f180985d961ba379ab40b7c3c7058a54021fabda7754edb45cc5c86990cdfb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e4b75ae4e55c64c75d332211edbf47709c9cbd575995a3ffcf7d2c97a3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134709 Malicious code in joko-tumis54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173cd634e75261c72bab3b035fa9236a774b3d11661af12f450bd9ae8d307f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136310 Malicious code in putra-gorengan28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed18fdd2ac7ea3a3e1ac1a59f1dc732c8607696ee520c811a76b33ec504df9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135397 Malicious code in mahesa-ragi39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0cd6d0f7180b0c7efa95fe0b42de3ea5542f85146cfb7f54e4452459be48b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...