MAL-2025-141548 Malicious code in deneb-markdownlint-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9072afaa134e1e2a0c8fd4b490cba7e97b3f7cd3d0a7707a1d0e64a8aca1f89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139145 Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting-jade-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe94810cfbe2fecd8323a3d608369dff883fb8418a542956e97f25dadf9b5785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138988 Malicious code in rude-lavender-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ee9543ae84cb84e1102f2a5721a396b7b8b264dda933eaa89511a15c2fa677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bubur96-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0575ec8709ae4f461e054f58ae6e283a73e2ebc5fbed2d12f24a7e167bfe83a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-peyek61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677c4456ae2d1202fe5f21da3f980a674bb48415b2dc6f9417d8832d7e2eac81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655403f507ad1ab0be80108e9bfc1a7d67584c7b92d515d83c262bd7775244dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87a33a30a5d19dd7bb9d73bf77b48026d6b3c8383a9b0dd2a8d72de7fa43a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-lengko13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0d7e80c27608f8f6a64bc4595a92a693a8fa057343f027886a5805f939f449 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lodeh62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b90c3d22a1b676d533a92a9afdb7a0b1a1c1d58adbe514b59d6fdfb55073ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cbe10baf1a6c51f52175851dfbf7009e899ce75c7d603461f4bceb7df8a905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gandul3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669fd92757798a142b7ab3a7a3b39e5d7a299b122c29c64ecfc55fdb1c77e164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gudeg39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d48e6cdce606f7caab75f531986ea98c1a927a68bfd35d25f8ef66f76a4869e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-lapis87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b342339880310b70ea473f44aa84aee682e259d52da5502c1ae3d91fa84f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-papeda41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8d62ee417a01140d80230e9a24e60958538af99d079e17e0eaac68b26b698f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kentang1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe77a250a75102ddd460b77248c4092b5dd08def2bba5097847396a344e74caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gaplek12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7c61a0686427079b1534c0d89921d15ce01ffb7138c4dae7b60ff961d0b651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lumpur33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ff38c554489e0012def96f1b1e25bf1bc2a60a67ab40e64fbf991126dd505a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6ddea7c061f9fa3625f5c65f62f22bf187f383f91cf45995898e189d3b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...