MAL-2025-144013 Malicious code in jsonp-winston-rollup-plugin-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920b0a97c6f918e65d1ce8ace558061566f0a81e894ccd0dcee9efe5219f57e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-dependencies-restart-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84afbb88c014567ce635de5bd2f5f6ef18ad0d1ea7dc744aeab38c3484ada01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138856 Malicious code in mammoth-harlequin-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a11c44a51e982802c12080a6a7e60891ac5877e67fee07717627d3ed13172e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest-gray-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af217675d927f4ce3a7993c6e91bbca17dd3eaf15fac16022b4c64148ed19a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-soto97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f0eaabdba2683cb5a75157d6e12031eb426172f6df93032c473e8c03cea3e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-ketoprak86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c1c11deb6d256c3418aa029a94c2a7e615a05e965b8cd45dad67856bb9807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kepok64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cffbdae579050de8da4e6c31d207fa514f5ae4cb742078be485476cb1d47381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cognitive_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9bed7823fb9b517b425027a57e2f0dcca1a7617958838024f88819fcbe6e50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132350 Malicious code in burning_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f324a9d39e2222dea83de2a1fbbeff9bea2e9636a7365feff13c7c2c4625a750 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136300 Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138378 Malicious code in yuni-sate88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6953b068770a8103a560902c2061246581f2c1c35022d8784d73a5ff9d4317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132824 Malicious code in dian-mendoan44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83ec6c6214fb4f617ed8c15bf69df85d2332260e1bb0552e959dfe5824fc4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-sego55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1547653e071dd1e213a1f99d87da8cb908f95e5aa51fe39c6318dd5a8107403b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-martabak35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd5abd1c58d60f5dc5fd731cdab6c31b03d4397a98090936fddc15aae5ef13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-mangut29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de98e0f0e148d92e314c04f9093a8cca68f3682090fb5e6608a8945e8fd44a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1819d8217b7577781e8a7176822613cf1f3239e9fc741a30aa26d420ccd22813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rojak98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fa1275cdda401931521fb83182b1896d3eac085981bc799e1f571a6e4bb1842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-gandul56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cd2e6491dc72c764d5014fc67483becdbeb72ae886ba4055bc79b88e4b84b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tapai80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 544615cfe38106ae25b8c2f9e72a16aad05bf257dcb67e2f0505c03e73d30ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...