MAL-2025-145038 Malicious code in miranda-hydra-radiant-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90b95aaf98636cceb7379e4df4336d4d867d914021b5a92d636bba39ae4c0381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf4dfaf084bea5fbe6631f312cc1b90f2312c0cb72f3cdfde5b2b727a3590c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lapis49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eb77c147be35be66c3e732f6dba1cd25df8e94982e638b81352196232e62e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136810 Malicious code in rudi-ubi44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77835c4ea68839fa5f56bef58ad5d9f3fd7db5d9be9d7cb3ee92a8a654cd3bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-kue41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8abf70c61b7a5f0be7b739cb1dd318c705f687761ca90d68a83b6828cc460eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8ef635f28053876b3a78712504f819ff5b8240d510d365cdbd90627564a669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133738 Malicious code in gilang-soto61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb68dbea58e99dad8763a49e06ac306a77f15475edcd2a015ea8b9d0d9d182c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137922 Malicious code in wati-menjes85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1e224527f4af30531e374026b170271b7c936ccd710931ed7536f369ff7080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sate21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69e355e7cd09f464f98bb22dfe5b23700fb9331268f6338df620d066745fb26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-telur52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ef604aff38f83fdac063e60591b28a57ddb8e26b636a64a3aa6fee99c072b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-mangut62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931e94afea2fb5bc45d7b9e539b0ea3faa4792a1f8813b2718b1c4b69ac39ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis3-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441ee512310e1df4488a2b8c446d2dac53bcf83064c39caae531475535d49e77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sate58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae93f1508191cebbc9e6fbbd873030eec51e8d190aa05fef4d79c73b420d4669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sate58-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ff6de3eb6832784ebe88f8f8f7fe7fe483ac0142efbcb089c4b31eaa6dacb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128027 Malicious code in kurnia-tahu60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efb4b9fe2e79ded20c49a345426d5e5ea7a91d40d88b9977e10c8ac68335a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125019 Malicious code in arif-rangi53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2886512d096a7bfe2750d50392484cc03175500ccf7c3a27589f04292c73e1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127650 Malicious code in jaja-telur62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead85be5e5f3f53449d0519ea3d581d688b870a2886029fe91503e11e6f567e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mangut68-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e9d07b4372143bd87101b02a639b134c8c0b6d89225a1a44004e1731dc4443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122109 Malicious code in nina-lutis81-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603a3d1f730e6b6e94e89b53dadc42b3c7652e11c6b506ab3bb8fc94c36f4f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-donat42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d14bfe123d3ca767dd00d7119ba5461772b8e22878767514030e5cc344529b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...