MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141423 Malicious code in cz-conventional-changelog-kastra-rollup-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38e9525cff2d4f497c1e161782ad3e5478832085c188b7182639221632cc9fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144340 Malicious code in less-nconf-global-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97322a9efcadd3ac290dc054fdc79b5dad4c2f616aa62bb535d89bb8525441d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144807 Malicious code in meissa-heka-wolf-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 303ff4a59d56a3eaa154f024f1234b48e7c42b6f0addcc29a1998dfc7c7cc0eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-botok50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da56b4298ee7499063d922a7bdb73a3409e1c04027e6f6ac87c79c5eb07bae27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b63ba17152865c04b6d9c94679962fb327800ea68d5e91847bba59a0c5f06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02156cd881e85734f0c34c5321e2db952f8caaeddefac86d688b73e36033af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-brongkos100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b41e1c6937da5d980b3008c24f401f2d965529b6818da61a858f743a956610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-botok23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153b21aef4db6ed68c33d6dfa29f0a55107b5e182cae0049ad63496782380000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138442 Malicious code in zain-tahu86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63055904e9b940626b15ab62701f820a6348b885f08c628d371b4a2ca5c7771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133989 Malicious code in hadi-tomat91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270e6c975c49a1f625d0d2beb2d225a22527cf2d14ae12df36ebd31448cff297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133158 Malicious code in erick-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e483fc9718529661190b6e387812ad5c774b5a4ea54818239c60e03d139c349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132390 Malicious code in candra-sate86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc4b8de89e1bf132c1e3785a0fdae776d3a67bba6477ef020ad4d9e78b8013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134201 Malicious code in icy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fff2ff976a435d0387f6c4af9fe5acc2e2802a45e07bf1ccc1bd7e6f3739011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135736 Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132677 Malicious code in dependent_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a5a54037a6022988b818f0e1f3de35a996825d0ed447ec2ec5d40aaa9051df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132311 Malicious code in budi-esdoger64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24be939725c60ad80c7fcff34d44012592d73c1a16dab314bb347686ed34a886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132864 Malicious code in disturbed_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534c7a4d824258c8225c709664448565a0ef271e01428cecf2d731dfadcea58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-toge40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24376d126356fb35864bc24996e4589cfc216a0d93a76dc39b60ab557e0323d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...