MAL-2025-148186 Malicious code in spinner-build-castor-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 421b20dd487b367106ab1d674e21d45f7c7271a8b88f3ca452f9b4850cb33f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140815 Malicious code in cli-version-standard-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590520d16eddbdf943ab99cbcabc3f81869493185964f9727b048f57817baf8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139775 Malicious code in avior-materialize-arcturus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a0abe30ecfd362bbf43ba3c31f8f5360240afaf776b1fd268c9fe69ee0e198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147603 Malicious code in sagitta-lint-staged-toml-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fca59636e0d9c48154390c3820e7c28ac94635107dd709d00f284b720b8ab5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140602 Malicious code in chai-procyon-postcss-loader-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb383055d39ccf72e511de623d5b1555ea9a47f86d90567d3f808175b6d3ed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138674 Malicious code in dying-fuchsia-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71aeb0a445c330a06b46a7c6edd20d25d8d0d00d22f1f675e959b9aeebdbd67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139090 Malicious code in unusual-fuchsia-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1a58e371677ceca7c5ad0986e0e3e50f873251e494fc23d8415407a5cf246c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary-indigo-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64749bbe5ce51de06bcc62324c7d1a555e91365d0f78c8b27652fc2ae5972044 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucky7776329 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775c92c8f08edae8528d35b61c2534dae4487c2a062d37869ed4b082ccbc1027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-gorengan46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd736304d79edd2096645adca5c805ca15698db0edd996091d704f5bc131f122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-lupis98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfb9c49bd72d7dcc9d9542141f7dee09f3287eef81460a083b24ceeb6983653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d4c623fd0d90883b9d3d8501cc361724602e94977028d652d4715e97e55821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-moci56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7478c77509215c90db4f2105e0e572c30370ece3dc0c009fa781c16c006a8d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-brengkes20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859df9f13e2ae7e1459889e891a5f8672987de76341967900df66cfd1511d413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-buburayam83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39e5baf41b4cfe727a55d420dfc51e20a473baca395b9bad2ae5c5de6e758448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gepuk14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2021f366656311ce22a674dec95140ff393d8589e41a517087c216ad3b966fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-oblok11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc0b39412c92c92d767987804b3fd5ad91e3a3557c73e0ab8b6de37b10f879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-jamblang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b754f2544fd1a98a5937dc9a70a3c25a90225c093adf44a34fe55ee5ec5807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-semur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 160d63427703c79b052f4b8cc577e417d4923f29bcd020420db7db48ccb7622f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-buburayam51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf6815e46aaf0d5c94b34df0d2768eac4973024d43a69b52ecea764913b08dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...