MAL-2025-143925 Malicious code in jest-heka-wasat-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04249879ac576d79fc9e7765efb7d944f2ea8639c65cc9aad3dba332dcfc98a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139194 Malicious code in achernar-cluster-wasat-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870d69410b64679e12b4dc69b45ed871b6d833f3aee37e7b02406623d15a891c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143645 Malicious code in inquirer-despina-arcturus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625a76d2fe405521045ff04e3a23711f2a1d079e585b4c732d16f3b5da957c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-mui-eclipse-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45366a5bba33878c6502bbbd773eb845366dcc9940e5c867b6093acc04700fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hercules-configstore-telesto-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac6d123a83e0adad67619b53cb90be0f24177b7f9990c76a5d254c073cd35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138863 Malicious code in mature-olive-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138685 Malicious code in electrical-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132779 Malicious code in dewi-nasiuduk92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b37912991f8003beb9b2741810f57f44238d37767b1b6ea4cc1a389536987d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136555 Malicious code in repulsive_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668a6b0df56a067d23326fffb2e816ceea54bb5b87d33448cfbab700be3bc89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahu92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a437c1fe096bced621822222b8101d79dedf3094ec631242e8a6b7585f2ada6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e4b75ae4e55c64c75d332211edbf47709c9cbd575995a3ffcf7d2c97a3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-mangut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286e0e6c474cf19e408647baf5cc78fbc6b6a9af7bbfe6895d6d1f8d519a272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d53e57ee07f3ac26be5f934a44b24ae168372f7eedd4aa0b5ac102df3cd1771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tomat63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f180985d961ba379ab40b7c3c7058a54021fabda7754edb45cc5c86990cdfb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136492 Malicious code in qori-moci5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d12c5909a8c3636fa3b7211d760cabe41b83c840ee864aa21d3ffd357f2c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132509 Malicious code in cindy-tapai100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6bc196d1247c78701565c629a395ef25a3e74a96474473d583f80fcd6aae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134709 Malicious code in joko-tumis54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173cd634e75261c72bab3b035fa9236a774b3d11661af12f450bd9ae8d307f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...