MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-serabi34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132dc0945e83b993854e2c5615b4b2cc225672fddbc172dab5d70abdaf2863dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7fcc266018e5eba9d722d4aa157b100f05f5a9ffadbb4e7068dc92d23c5f8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-rangi40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5fed32eb883407f9d6bef5619f65d5779a0c1251c70b20250e0d1fd99daf689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba71d65c17f09bd483755a349822375ab78248de3b4c9e9b81262ea343dd4798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133238 Malicious code in erwin-tahutek79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09060a140c2ea9223759bc04727bccfdf3afc736ba31d76343cf7438d33ec27b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136368 Malicious code in putri-donat50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474e143f1190fb895784ee39989463f8663e25230de5a97c28ae4b158e5b9ec7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132226 Malicious code in bayu-rujaksoto45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985f7678f5775382302cd708b016129eff838ff4317529367e6636d6b9370de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136262 Malicious code in premier_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5699a0583e37e240735827b673b633ba6808bcf569fcf7a438839c1e6c21e00f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-jus96-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d4f811c59c54e97c5e12453d47ab7406be0cabe8c2e4e621b6c87d4e787f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-serimuka50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 002bb4169ccaf03b8dfcf81922bf98f7d7976b2e245f1e1be268495af45f2fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-papeda62-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf87246d9f908b2f3994f265a51782601de2661127baf3f37cdd73d40f84154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130575 Malicious code in tiara-papeda1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224e960e6fdae4c251736a32679b2250d2729c7c9639d6413377daaf1c8a5a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128462 Malicious code in mahesa-nasisayur10-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b25a0f2e8229716a1c09a80f4b15f4b7cdae6536bc97b56fabd1fb2f03a9e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127408 Malicious code in inevitable_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4515a12f22868c0b7e3f759636d3813e8d372f045a40722cc922ae47d792a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-kue6-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2870b0388c3b2dd8a5b8ee0b9c14551c887d7679aa5edc12c2d442d844fe4fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-kue60-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9431f43f61ec1d91bf670a6b5ad72b8c52c27e4914ecb6d9c6cc08e42a96a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9307536f924d0d6311ce7cd69b59e376bf4207d1070f2a35c6fc2cfbb0532afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113400 Malicious code in dian-moci61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115dba4721681bb069714235264e8b01fe9d09b651facb6cd5ddb319276bb9e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112207 Malicious code in prior_pig_blue-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91a09fe7c95b4256c8be3f7e138aed4efa21ab5c4a146e8e9905e488de244a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...