MAL-2025-155768 Malicious code in hariyono-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59161311043b8ee9e7f7fcd8ec2e96929ede59a77c50af9e1b9f6613047cb0ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164936 Malicious code in rita-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70e7d0d48ef84b27938da40ed12fe90ec4422ce45944b392ee6cbda16971198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169174 Malicious code in trevora-cir120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a9a561dc3ebd6c2ba3776182e09fc8622d522079e4035162c833f71877420c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-jest-titan-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f9a89db13516eee31346632bb512e77c069f8b2d4cbc1475b087e4a2668b42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-ultra-spinner-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4385603b947c7397e51d58aac7d7b05374d2f684bdcdbcdce3dfbe0deecd80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142274 Malicious code in europa-jekyll-xerxes-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1705ca9806e9f300c9c1ca012b4bb3beb9f94e83288c76176704730d08ce77f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141733 Malicious code in dotenv-parse-variables-proxima-markdownlint-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 913af6b808b2592fd435ba6659a92acd757d2e960ba9668aae34518b74dc98bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-loader-cross-env-nebula-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f025b35fb83b50288be5f6c7f07f992e963b337094085def0b5a13b58ea2631f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139415 Malicious code in antares-ignite-apollo-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9955c0bdc50f51dbe4056f786cce9f2a0b67b0957ae6479ff9241960d1faba6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147888 Malicious code in server-acamar-izar-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03a7fdab3a572c9f4cca3c5140cce027ed69ed81f12cd697baef6fb41f96591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138975 Malicious code in remyd7fh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501fed8bec0c67578f202a34095b9bcc3cbae44eaa54aec08cde62f287e21757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137040 Malicious code in slim_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8901f50f3c5d8ecb4e9f45c651d1eb5e5cfc20e56081d1806358fa85117243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133809 Malicious code in gita-lapis43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a1651216e42982773cdbdc76a29778120b8c48775d7f763a888f683810bfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137021 Malicious code in siska-rojak67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb38049391ded9ca575233e5472da89f4953cd6b233350cbab35d4f3fbbcece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134177 Malicious code in hissing_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95c5a0c7bafeb0c64a43c2f09d50a915f0a4d931ac4cc00dc32fd648e49ed72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132042 Malicious code in andi-mendut47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75da248b477fb519e27a7517c019b28b2ee82592653218953e4feee3394bb044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7270ab468a2242eb8bb1e8679a329c5b70b37f47a9915c256b258dbfba2927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134807 Malicious code in kiki-lengko10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c691249a6baf6b23b17951bdfc7110bce2284eafd367dfb8d422b8468280906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132214 Malicious code in bayu-lengko71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4441ba85d56b4e78fd61884c489ac87de8bd15e7aa3ccdf7abbc32391474ddce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...