MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142739 Malicious code in fusion-link-hercules-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a169dd2bc2f690f5f96eaebc400c1c5061f09e507d64c12e736118361cc2813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149551 Malicious code in wolf-jabbah-axios-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb514dc69b97db26c0206a29a61c0a101baaab726b1e5cb364a3d76a6c7a51de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141839 Malicious code in dynamo-slidev-slidev-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8fc6b54418bbb2055bf361f172bac1285946cd823c21eca5cd6d35700379e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-lapis51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6691707bd2018c7fd0d72378db8cc310304b627b71ceb59f20b5d3880af429e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134801 Malicious code in kiki-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b6e14e1d3fbfe6ca520913ab6cf9d69d85e4b4d3f1973f86fcde71281fe6662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138213 Malicious code in yanti-jus76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c162a39ba4b4d63336ba381268b1f4bb9b13e4c11a719675fc4cdcbe7d53b4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134993 Malicious code in kurniawan-gepuk45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b08dd4be212f92f384358b6e824968cb3155d6a49a6d985791c8931639758c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138315 Malicious code in yearling_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe415d17203fea47a05d508b140e03c4c59a8dde3d645380f822f2165fed778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tomat98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d84d37bc56f3bc35831f284684c95143e7e5c78d265d41fbda15b9aa570418cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136033 Malicious code in okta-brongkos12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f9125db01085f95203bd69f8026b379cdbef52b9b68483bfb3737a6020ab29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137227 Malicious code in tania-pisang75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713c67554e00f47a29e8c8af2dbdc69f7dadcfc320269c918b427b37ec6715f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-tiwul89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccf2e7b0fe5b23b34cf0813c756e8e946ab5923862c83c828cd058892149f655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee063019d7be8d143cbe9ebcf2b8e1eaceb049e998b582158e6f302e6d1954b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-serabi2-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ebd95d6cf81b1be67e9f1f56ce79937959f21cbb5d65773c0b9d38079ece37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-lapis64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc51cbe86f91e7db399f62a76418e84827a94a4d8a6c4ceb39ba90c5ff01aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125495 Malicious code in citra-martabak76-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5668523067a23454f4158646603d61098ff273046657983fdef8d46c17753b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-rangi34-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52892d7d0680032e3c0929d94760e5f1dadfac8a07880b1ee2f96c907725a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131805 Malicious code in zonal_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aed7306aca090736036d98f8517a779d7388d2bcadb915c192bdbb441f99b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126239 Malicious code in erwin-gorengan71-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16e6bb00b9387c2ae4e1051a23dd58babd54da4c9066ddcce31884c5cd9f051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...