MAL-2025-141210 Malicious code in cosmos-mutation-eslint-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35ba4c4ab2fc046a741a48a61fd16f22d5f146a6b58e777157f13f0a8aad1a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138593 Malicious code in basic-green-mollusk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27433f0fa6bf15c5f4060e5f50fb47748d2d2ccdf05579f278a8b6f6d3accb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138738 Malicious code in frightened-green-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db59ba617bf579bbd2a0245f9e1b6ced1df533af2895fd80c5a6138c9976bbdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138681 Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139020 Malicious code in solid-rose-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a474df64bfbe4490e83fe12a17801ce9d3f79bf50d284d6bed050758c4f6ccfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-semur83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f396849dff0d41c94e744d85b846788a128942e80ee2b7a41936c9d9aa106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586e70d65f15a42bca6b0ce703a63efe60e5331cd04b46e7d5979dff0945faac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-nasipecel86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5f8400011e7644c72a3ceb5c10869bc19f9f80856aff89d8cd0b0de14986d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-kripik42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59ad47a78c7482dccc545732c721cdf63e8f07d16b000285ad168b7e0acc6250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-gandul99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9437d9a216536976d27665f00effceb1c33f039c5ea08ec96f806fe2d7eea2ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134421 Malicious code in irma-nasicampur69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1af6b749a5c682238bfbf4154049ddc91fd1890cfbf0258fab86fef0ab90fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132574 Malicious code in cold_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42b6da5a8c8df97813ac3aae50db5780d2821cc5efa10f0cb5e32c4af79dd62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136300 Malicious code in purring_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e518f998ce1d11acb733ff81cfbda4b324b8d333570055d68b8bfc35cddfb6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134228 Malicious code in ida-lapis47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b69fc7e8db5dee75d27f70850377cbf46c953b847c84d85496fc55a8b7fdf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133942 Malicious code in hadi-ketoprak84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa09f403a17d2eb8f544eabf3c8377a171fc400a8fc5f891b8a0051f8087c479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136449 Malicious code in putri-sroto78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 666bb61c4ea25fd8a1f81523488b4a230f0c6aa6fe823f1cac078c5f6e193df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-nasi76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee9b104b157b9fb2ff7389135a307b0f3c72756f95be56131591c82d45eda70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-rujak27-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5967f3c4e5ae03bbf7861242e1a199fbab45e698ba6de973705edecbc34e5039 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-bubursumsum99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d298956681ad80bce49d5a9af251ef0038574b44956ad3a1eedc4320508a26d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...