MAL-2025-141232 Malicious code in cressida-ganymede-firebase-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb71ee957d87735cb80b3b5cb9e0599b90d70af44d94f738a88ef243bedd5e00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142496 Malicious code in firebase-epimetheus-request-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c721b5d84b5da0745603263ee7cfaedc0a0037ad7034d14d12db5a205122739f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149739 Malicious code in xml-ursa-uglify-js-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 985f726d71e755b61fff982fc9b025f8e561be5a05f121338a0498316d029b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145905 Malicious code in orbit-delphinus-convict-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8c21db0ca3c2e3cdca7740c7b7694a527a0fa3c519ff73b575f380f1740876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enchanting-amber-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa08ea77b8364a8a8b65d1f68d9036e14452f9fee6d342d57dba367813fe8e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid-beige-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca8ef80ed1424a16d0ef56b45604fd1e48ff68854abb8804c40184aac248076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139087 Malicious code in unexpected-tomato-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcb970d18f72f38338f2689df19d03af3596d67d205682d82d165ff669ca0430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138631 Malicious code in confidential-brown-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5359559db4b2d77ca1c9ffc0a98c94009fa787d18e244af3dd3cffd9d98d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138874 Malicious code in ministerial-bronze-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b03000789c13c9810467f5e34f6dadc2704b04479636dad575ac93802b95d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138996 Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-esdoger83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774bd51f16d4ec523a91ad7a814c44dd49843c64de3c30f6fb1c3f959c7513ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bakwan86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f928a4d2b8811a27256846cda3554fbb4ddef2156d6ca39ac0b8f8fb11d9fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-ikan52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a5fc5c1999345811726aa4c15a3a1aeb5729245bd75540486439b6b10579ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-tiwul87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74d8d066c19acd89e1394aa66b847f42bdc90f3e776fd0112db4038d888af91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kue6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2146e7797a36fe28377cf1d296ece91dcfe338cd30b7e058a33137c1c2264ab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-tek38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14166adb70b84ae6a2b08c0512c3bd4e3f07acee3b4832d81e016d80bf557059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137301 Malicious code in tiara-nasi67-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb5b09535d67afb3cb773cd37cbaf5f87c23451c936fccf8cecc59ffff52582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132937 Malicious code in dono-ubi45-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a89a5a496d1105a32a629d8171b1770e8d1509ab2636a1d2c55a073bc042de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134468 Malicious code in iwan-klanting24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3012a4952d775335fd20731264fdc93dffdf28c3a44bef2486b9810f4af0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134195 Malicious code in human_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9a50e65b361f2e457ef362e7a3aba8acc05a69626ce3bae82020f150b547a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...