MAL-2025-143040 Malicious code in gridsome-eslint-plugin-neptune-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05892523376040a7b321ac3278985edf9c519d65ebcbe687651dddf10f1f85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139145 Malicious code in mental_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cc193212bed6198df35f5621578795bb225e27e93d902cea7802975cf77b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mature-magenta-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1de26faa67ad04b9425d716aec4c78ec2e19bea135d36c63fba463a0075d6c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting-jade-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe94810cfbe2fecd8323a3d608369dff883fb8418a542956e97f25dadf9b5785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138988 Malicious code in rude-lavender-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ee9543ae84cb84e1102f2a5721a396b7b8b264dda933eaa89511a15c2fa677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8476ebeb361d24c3c242898047fe4e90ac48840a2583d7a185e17ce03b757a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48593d7fb7c174f7532fc8e94e7cbe7659378e28c4bdbc9dd574fa82799c7c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-ragi21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce6ddea7c061f9fa3625f5c65f62f22bf187f383f91cf45995898e189d3b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-peyek61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 677c4456ae2d1202fe5f21da3f980a674bb48415b2dc6f9417d8832d7e2eac81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f87a33a30a5d19dd7bb9d73bf77b48026d6b3c8383a9b0dd2a8d72de7fa43a5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-gudeg39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d48e6cdce606f7caab75f531986ea98c1a927a68bfd35d25f8ef66f76a4869e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132515 Malicious code in citra-brengkes19-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb522714dbe543b15872b2de3d6cb4cd2c98cf3a5637b23fc1a344dbcb98ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13166a5eede1b1e9de9846aaf496393870b05b9d500821ab7190ade5887ad58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133927 Malicious code in hadi-donat47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a29d0c889ff2048ae1f365dc7bddfff3af2d9cb1567a79a7f20350c6034eac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136732 Malicious code in rina-tahu60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66aaf561c85e3fda913b4042cc74e7494c7822ab01409b3e7ca0f58491761f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136245 Malicious code in pleasant_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7d7d0827125fb7187807d1d5bd54120f31ed4daf0278fffb5a8a602dc6145f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135614 Malicious code in mulyono-keripik30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2898c2fa6e607939985fa77c5f7ebc25d1da6eccd15bfa3b7b9d8316713c11b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-lapis87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b342339880310b70ea473f44aa84aee682e259d52da5502c1ae3d91fa84f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-lengko96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c95ed4bd3dd7524046d4bc8d767e2528f305effa1cabf6361ac597d3eb51f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakwan92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655403f507ad1ab0be80108e9bfc1a7d67584c7b92d515d83c262bd7775244dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...