MAL-2025-145269 Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9109b8ff982a9d1497a58c4c02488acb7ebaf1b4704ee722c5231505aa1653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138664 Malicious code in dominant-plum-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bae52cfb25a9af9c388c4e718280853f0a3261a39fb8fcac1de8ae77f8340cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138648 Malicious code in defeated-lavender-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85de9281ba5d27e75ea0a077a2a1957518f8fd3cdcee4945eab4b5ccbb558a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-sambel62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e080b2dc028e0b6fbcb51845cc1ac31253ebcf09be27a60fd7ce8380c5f187aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-miemee63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b9fe3143e7283638248bf1212eb9868a99e17f1a0870b9f5c49c0ce85e1b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-gado-gado99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf777b232a939a35018f0b0687f03ccbb1434fc682b6325986ccc45b9ca59d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-nasicampur46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291a6bcd627ca8d8eb72554397d8b47852d69023830a01f6ea57a6ce976709b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tiwul5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe032c20f8075093403928c2f707dbf46866c3d08a26603bf0d0c523a19e77fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c01b27654acc5829307d995ddbcaf727b46807e0670564c4dad3d5b5c3cbdef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-martabak24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c96120b8dfe3c687d59cca44bf33bdc955b6880c289c76785d540181d561644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4a80b22f0cb89aefe8712cbb32f1dbf34af0c217c6c64c74068dcfbef2526f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imperial_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed558fb6767d86600489e53fbb7c1da8e4492fd320e164e099f5f219ec9e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-moci87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c079502e5f005e02d65848073250d0857048d2038d65b455ac70a8e9ca108ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lapis62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f2abe1476b15f9e72769187dc168770348fe6a925bb40eb0b94eafea6dbbca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-kupang30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f646ae880070e57d252c2bc155948c9b4657fa7249fa5515b3b2097314988c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mendoan79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1655ee4201035a2b7dc22227df8e7fe118ee256162f206b42df937d5e585633d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-tapai38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2b7548d8ce7a47a226ebbc301b637fadacceab389bf4d04c479adfd8ce65fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-saguer25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 628773827b66e14ae8b061a2e8b2150f6580cd302733b3b0daa7efb04d0c170d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-empal37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd85670c8aa09abfccdf3b9a70a08965f051eec9e23c8428deda2c7c75b463f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...