MAL-2025-147221 Malicious code in release-it-convict-io-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff837e9f66bdce73e63e136801ec54bd54f71d91562f3848829ef721900b433b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141799 Malicious code in draco-wasat-neptune-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3a50d36f059771d015ad833ded3b367018e0d184958b2768f1a46324dbd2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141828 Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142527 Malicious code in flare-halley-meissa-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ee29dde83f4e0b8f16285588b90dd4c94bf82be8c4bcf1fd7b1f20cb507e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142745 Malicious code in fusion-redis-transform-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca2f562084596430846a1d0703e28b8df04abe7055c8146527b1a06f37419e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-botok50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da56b4298ee7499063d922a7bdb73a3409e1c04027e6f6ac87c79c5eb07bae27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38b63ba17152865c04b6d9c94679962fb327800ea68d5e91847bba59a0c5f06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c02156cd881e85734f0c34c5321e2db952f8caaeddefac86d688b73e36033af0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-brongkos100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b41e1c6937da5d980b3008c24f401f2d965529b6818da61a858f743a956610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-botok23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153b21aef4db6ed68c33d6dfa29f0a55107b5e182cae0049ad63496782380000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132864 Malicious code in disturbed_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534c7a4d824258c8225c709664448565a0ef271e01428cecf2d731dfadcea58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132390 Malicious code in candra-sate86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc4b8de89e1bf132c1e3785a0fdae776d3a67bba6477ef020ad4d9e78b8013c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132311 Malicious code in budi-esdoger64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24be939725c60ad80c7fcff34d44012592d73c1a16dab314bb347686ed34a886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133989 Malicious code in hadi-tomat91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270e6c975c49a1f625d0d2beb2d225a22527cf2d14ae12df36ebd31448cff297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134201 Malicious code in icy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fff2ff976a435d0387f6c4af9fe5acc2e2802a45e07bf1ccc1bd7e6f3739011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133158 Malicious code in erick-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e483fc9718529661190b6e387812ad5c774b5a4ea54818239c60e03d139c349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132677 Malicious code in dependent_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a5a54037a6022988b818f0e1f3de35a996825d0ed447ec2ec5d40aaa9051df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138442 Malicious code in zain-tahu86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63055904e9b940626b15ab62701f820a6348b885f08c628d371b4a2ca5c7771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135736 Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129050 Malicious code in ocha-oncom34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68d40f77a09dd5abfc2ebbcf1c8444844889286c077f0e1038e6dba2151b816c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...