MAL-2025-141758 Malicious code in dotenv-safe-lint-standard-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96ce93bc5896847055a774b8ee4747daf6ed0538e96b9ffb3a4bcc8c1f03366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-hexo-auth-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d92c21a1b1e16f7cee7c32f463513296b72f874f3dc1d5be0b833a8f10432a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-europa-phenomic-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703167ef60682806e489086aa92d5992747677f48f9acf863b6490bb42e7068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-bulma-fornax-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83fd05f4cae9419b8910fd1ee365050b32f064077946a95916761e63494e2233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-castor-mongoose-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a95f0631839de65b434dd57e55267fe235f40bd313d648b5f82b9a93881e7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-config-csv-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f85e5bc2c4f2c2668a1ada2fef47ed7c28b32fffaa259ed1920654dd56ad43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148537 Malicious code in terser-request-test-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d93cff86f78ba974b32c4a49a98e38139666c4e5f9eaa44ee82074c2c4ccec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143611 Malicious code in ini-wasat-react-bootstrap-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bcd35eba4a00c390477b1fbe300caa6a78526cf8dd7a566a6fbbf3720279f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146308 Malicious code in pm2-registry-kronos-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ac5152983cc7e617269f27275241f71ade3badb45b7a5d4add7542f23cc7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sambel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51793815411ba6d11b7f8f7a190c39f6bcdccb3409a4b887e56458e8f8a87379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-saguer94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbcf719e387f9e4311885d1bbc11351805efe0cb6d51a525b9b3e9c5edea0cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133526 Malicious code in fitri-lapis6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1aebdc9f3e1e0892695dd0aa39e86e086663f1a124166596f8b0e2cc9fc659e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137694 Malicious code in vera-donat49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d2d5cc1706a731f9dcf35d6bd0cbce97210406416dc23a902841ded221acbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133471 Malicious code in fauzi-rujak11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e1ae407ca3791eae1206c0262db9d36976682a8da8df351b4f1aa2f8ae064c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133819 Malicious code in gita-mangut24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ef75c5dd4513bf28c11720c6f31b7d65b5e5e0e217d503b53b3eda33c0abe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-sate71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f262f4c361d50038cdc56522139e3ec896c35d367f2605ffee02f6b261d94b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-kue77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d59756300d798ea1504e43a72971b31f8672c02520d5713889a672575598c4f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22dbfec33850211ce6b68ab5a06ad9299b78758c92982be9a75b100786f06cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-rujak23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa669135dfa6b3cf0a061cb093576822f17b52d9a979e1a93e2556eeb05f239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133277 Malicious code in experienced_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e247e1f2e8351dd19c3f888d5651ffe563d229beee95a736c2912e5f8d12025a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...