MAL-2025-140360 Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145929 Malicious code in package-europa-antares-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01f35a750f1e2d39ed65fe2e942c757ae4f634a276981126b42542894e1936b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148982 Malicious code in unuk-nightwatch-levels-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b35f4e13724988b9b8b6e19d6cbd6aa7acf2a8df370570ee8ea0c28c6f065c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139608 Malicious code in astro-izar-enceladus-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5b63fbc2117df1a11a114e5aadfed4eb770749bddd0c8d2a0b2c83a7d4874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139775 Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138674 Malicious code in dying-fuchsia-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aeb0a445c330a06b46a7c6edd20d25d8d0d00d22f1f675e959b9aeebdbd67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139090 Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary-indigo-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64749bbe5ce51de06bcc62324c7d1a555e91365d0f78c8b27652fc2ae5972044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-papeda40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6dbcac2e5e6d11ff0ae185a140a33c4cd6694925f8111f13cee2de90d4c656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-ongol-ongol47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a1cb5e28e8a5dda0ee3f165a0fc47868cfe5c295b9b7f8d8606c5cf18dfa7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-semur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160d63427703c79b052f4b8cc577e417d4923f29bcd020420db7db48ccb7622f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1e419cd32c3f5eab90fd721906fe24ad5767db490bd2f955ef2719b61bac019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ruwet97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e4d0bbd85a82f92448816c83bc4402c59549dddbc296d1b9db86cda747ce9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-pisang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7ce98bf2afe100a3e08835525ef63325ab0c75f26895af33559a30a749a67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6815e46aaf0d5c94b34df0d2768eac4973024d43a69b52ecea764913b08dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tahu71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08f1fb5d8e9b77a675340d111397311164a9b9711a2cc81f42661381bb6ef598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-lupis96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8253d89d27a6ac2501c2b234424c8c6d16c7e8b179531d5f6bca35236200ab37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kentang62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9464a4aeebf6d5c5c1a8c4223035096cda7be8f05fca981cb9021b44cae2b6db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-dradag86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b9fc7da93e3d7b2fc7c0eabda30f5c72698ff19b6fe8b541cacce8fb666770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...