MAL-2025-139168 Malicious code in acamar-cordelia-hyperion-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5122d370154d870ab49437c26d3bc75fa81b827695811b0298ac76a122f1de6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149688 Malicious code in xenos-repository-non-blocking-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57351d857a5ef45fe7a7fc3b1ed7e68979fcadd41772760fad62f6d92ea5cfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149115 Malicious code in venus-materialize-middleware-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7edf3762282a5e21f97e55705f10dce56e313a7824add172bb388fa0ff9e452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148886 Malicious code in ultra-altair-janus-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5c9ad920673d1292343afd8eaafad8a8ebb75d99982e3a69f8c00258a4f85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148983 Malicious code in unuk-parcel-antd-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1953b82391e36ab195a985c26582ab7fb12912a2bf8ee9d51ba8b3e5c2d9d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140475 Malicious code in cassini-repository-miranda-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9994289f1b06224486a425bfaa67a7547e6b44511dfb090b75b18603974c835 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate-purple-gull (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88da381262350f4dcce284e6843b6eaddf3a9a5e651dcb0e597d9b86213bb3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international-amaranth-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64acf5ad6a0f907676e6e78184a5888e898f62a99afc79b6a09336e7615b8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful-sapphire-llama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b809653fcb23ebbfe1d0d721d1e3f83d29617509c15eae8357867cd86a484ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138742 Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-mangut35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a8ce50a617a8404731ba7ea5e12c61fe794701bc9c311f013b98e93bed00b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a64ce4e95fdbda7048d30b03b6483a91646315846af40d669a3b1565b547c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tapai66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8a468ba145d31a1ddf585870c3a9960881951cf3f4157a84d6823d2abf6aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-lapis51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6691707bd2018c7fd0d72378db8cc310304b627b71ceb59f20b5d3880af429e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-tahu64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f7bacd99349129c34b591bc366beafe9eebd2fb0f2bf88d90e0e9f39ec0858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-keripik86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62e05a2b1498223f2bb3e024eace98004639cf88514b280359979e5c1f5ab5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f526d0a4be6eafbdbe7a00bbbe21aa76f91df3b898bfedf843b526fc2a241677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-empal43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1501f1efd3d244328bbd6632772e539befd0e02d5ed3a6db93c8bfea34cf624b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...