MAL-2025-144794 Malicious code in meissa-bellatrix-izar-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a856584fc3380af0d42fc31146d6e4f0eb878d35c362c2901800f64b29189a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147712 Malicious code in scorpius-publish-scripts-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81282aa28d9bccf123d240cee4bf111537ea0d82423e076ed8172e42b0f89210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144103 Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138600 Malicious code in brilliant-indigo-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bde506781711f1d0eabcd1756ed03bfca3c64564adc7bb6e04744440292575ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored-plum-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3d3322cd659440660ca27b138d537d5f1c9c36537a23fcb259c8eea296c058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139082 Malicious code in tory-maroon-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cf1118128f7f95fa195586236283c5692f80b158e4907847a39edbd7299f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ubi72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6c0e45e6f0c963af8d38af7807e79f74b4a693754a0b1d6cf5870eb79d36de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136197 Malicious code in patria-kue56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860ed7d3909eda61c3116e450b4f03cd78a98d36ae6ebc59c98914eca852e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131988 Malicious code in agus-sambel59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c8e04e72621409c47f47333be2e974ad991682c58463982d574a90dfa154f34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133542 Malicious code in fitri-pecel52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0881068cef42d8258ed8a07eaabef896fd4d9d801445ece8116a8dde14b5b5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131958 Malicious code in agus-klentik38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821e19d775e7aeeae3d20dcfa7409c8fe0ef1644afbd3aaac8af169ac6198574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137425 Malicious code in tuti-getuk60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa529535073ef7fd213408df19367975369d40fdb14e17517aee4080b48b5371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135412 Malicious code in mahesa-tempe33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e21f858cc3ed6e0f39a3decac1f06c035f57276b48a3803984c9024c4ad9a11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-soto16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b51f669ca5003276143a5d0f3636ccb0b5fc00b2418a1845ce709a468c8b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasisayur35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa856a1baa22181f60d173a1b34213ed99334b23555e25143170ed830c4f8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d70a466d6da81ae0a6f86be871128bf8b832cc4b9f9f663a60898b7b36d24fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-dodol52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28be7cbc32c872446374f3af2ab753b32ee10f8c92adeb6a9b9827347cedc980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137823 Malicious code in vina-kue41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7665b654f95183cf1f4439b7ded5dae6cbe213e346d01ec58070dc3d9d6f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132596 Malicious code in complete_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 752977c6cce98f410a8e231345bec7eb59c9254ebcf02d1d91a174e6cb44ec94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132561 Malicious code in cloudy_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d120546ee5ed24cadca3a77b4dc14025bcbe6d1b2ddb7399a7488383d5bcaa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...