MAL-2025-143498 Malicious code in hyperion-scorpius-xerxes-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5fcf3ea9fcafd2dcd691e048a33ae8872e48097d9d1a615d8762e7bbaec02d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140442 Malicious code in carpo-ganymede-yakutsk-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189d654540cef6b94c506eaa1ed104f2a336c216a56ab14ef252cff5083111b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ce57605fa55e0e0b41f5c70af1494ea324e3c4b07e22d5bc4395adf36d81b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-serimuka43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5d2c79edb9f8ce0b21d1b958942f8c8c01626432f40fa51e36e2168a2bd6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakwan8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8331457c7d9fae3ee84566ce4395c50d86320a1de35a21da17737689bf65c7b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fff028edc6c1469089b43067b6832c1624e3bcb770dba54dd0c3990a6035d82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d79e570ca284665fbf3a6b272ac98fb02c1248fc4b1a4fda79938d0339b328e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132879 Malicious code in dono-esdoger24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49019c3f27ecc024c955db6cc09bc7a7c173ec863df000265f2e71ddf9bc77f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b54d93271efb4a4bd25686acdd85439deb12d8b11a41e2a106255b8a679a935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-tahutek72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85cffe4e6c51c735b78ef09d634844f06e94a54291d20d676f442573c154c90d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134001 Malicious code in hadianto-dradag43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ace135ed98c227c7fc71af44605110e8d8894479ef2bb51ed8519418effdee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sambel100-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67f52bc832617e8d8b791f3ea64f19a55cadd534a4796b96d636a90ed7a4c678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-buburayam48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d732bbcc5d80d4bbc0bd7e33a81a1297621235b09d821f9efc26d2805495c0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mangga14-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb360c014a96a35960e2d358e35eda742553854da5d0d7ff66de4bd3af696e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kembang39-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2271548efa31ae0fffa50bfdf1832d158ac835e5f8ba047867b8376d20c08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-sego92-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d01aded1f290f96fa4518a1b727aa34372353e8a1ec8ffe2bfdf38acc735eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-martabak40-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c100169b55be0cead4732e53daa9c8cfe5b307058a2c046cee4396363059d365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce9b775f1b5cdee3735f389577b892d9474181a8da89771331c20b9a6287154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-wajit31-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94545b1c1ccb59993a647c529d0cc530e80ba288c44a5bfd038fe2ea1e48261e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125415 Malicious code in cindy-brengkes8-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce54d475bd0b58a3da1cbf34a3a44a2d66bf3ab69994d578e57d7f7f0073c54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...