MAL-2025-145499 Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141929 Malicious code in electron-rigel-bootstrap-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bc5104c5c7e429d0d8c1f83f94dc9e0d96b43745df34a274ff9d81becdd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146825 Malicious code in publish-zenith-cygnus-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d084c950dd5dc4f71460664d9a08a96009f6beeb79aaf14ec9c669e382574b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147750 Malicious code in scripts-typeorm-thuban-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6e15df4cd79df23ccd9ae42ccecd2f2aef0d2b69870cd77e6eac3904be8888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139087 Malicious code in unexpected-tomato-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb970d18f72f38338f2689df19d03af3596d67d205682d82d165ff669ca0430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa08ea77b8364a8a8b65d1f68d9036e14452f9fee6d342d57dba367813fe8e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138874 Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-keripik84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50fdd24e8e8de61dc3909a8b4dd3d7aebbb10dfd7dddf50d9a2cda74738aedc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut76-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 835498ea047a2b5c28abd548aae43c1f0d2bfcc6f64f061eda62df8ec784cea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-lumpur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a36eaea4c1a98596c2c442fadcb546be7e2fcd5f1d1c69cdaa6a6fa4dbc718f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-mieaceh74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d9d9ce76cb60cc7fe0f541cd0a59891f9eaccc9d6918928c33a3b749cbd096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinctive_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8236cd586577835e22244ab3b48d9a95c49bc387f7cf418d7e727e81f9025aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-esdoger83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774bd51f16d4ec523a91ad7a814c44dd49843c64de3c30f6fb1c3f959c7513ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-tiwul87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d8d066c19acd89e1394aa66b847f42bdc90f3e776fd0112db4038d888af91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-nasipecel78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c678c19ee93c486378896b3c7c5e949e5967d355d114381aa861775de9476592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-taiwan9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1383bf793a423dd3ec5cdb5cc53a52ab2f8ad61e10f8524cb6799afa89069e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubur79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c3a847bd8618f5e1ab54718094caa2c62395024272ca5337dfb30ba740da26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...