MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143376 Malicious code in html-webpack-plugin-wasat-fornax-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b11210d9eda121cf11eccb91860419ad970b15ca9cd114ec8df21e82196e205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144042 Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138863 Malicious code in mature-olive-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138685 Malicious code in electrical-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mangut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286e0e6c474cf19e408647baf5cc78fbc6b6a9af7bbfe6895d6d1f8d519a272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e4b75ae4e55c64c75d332211edbf47709c9cbd575995a3ffcf7d2c97a3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tomat63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f180985d961ba379ab40b7c3c7058a54021fabda7754edb45cc5c86990cdfb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahu92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a437c1fe096bced621822222b8101d79dedf3094ec631242e8a6b7585f2ada6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d53e57ee07f3ac26be5f934a44b24ae168372f7eedd4aa0b5ac102df3cd1771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134152 Malicious code in hendra-oncom75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05815a4289924c517e4adb60b315b18ef6b672b6174866670dc4d8e46a11f9b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137698 Malicious code in vera-gaplek47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b462e5ae36e628740bab7801755f1181b79595ca85dca8709ea8b2f688a6b31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138507 Malicious code in zaki-tongseng88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a51b77ce65cdf8ae902b7e4a89d1824141c60e87cf39355e4ad4a0007837478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136555 Malicious code in repulsive_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668a6b0df56a067d23326fffb2e816ceea54bb5b87d33448cfbab700be3bc89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134709 Malicious code in joko-tumis54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173cd634e75261c72bab3b035fa9236a774b3d11661af12f450bd9ae8d307f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132779 Malicious code in dewi-nasiuduk92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b37912991f8003beb9b2741810f57f44238d37767b1b6ea4cc1a389536987d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...