MAL-2025-144745 Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-flare-mensa-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cb283c5e1df3af407d2bf58256597fec083f923747006d84c54fb6f2b16d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-commitlint-config-angular-gemini-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88776b0e7b1a7004d098a5bdbfd304045d25452d6edab88e8ade08aef0969c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightwatch-nashira-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed0de3858c18672b89b9bc94035d6db8bcf216c001f9385e80ea20767b99f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-bootstrap-dorado-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecdb015ecf00beffa2b70e8640ab4a3486fea2e8588cb0a536770dca69486d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138830 Malicious code in legitimate-magenta-mole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 035421f4cd958a5d3b454ce933b042be38d92c3a1d1f1b89d7b329c8c2f60531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colourful-violet-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ac1feeba8879a8b0966dd72f4c8d85fd73ddfcbec4bed1d55dbd2f6a2da3c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135272 Malicious code in logical_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c97430b7477100d3c921305a4028ee674ebb254e1ef227d899ca2f0332ec4ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137404 Malicious code in tragic_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca6fad232a580a47300be8724f184327fe50b7ffdaf9f34c2784e5042d999029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133760 Malicious code in gita-brengkes60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1571802300c59f7df12ad163ac351758b2dde729d813bf37f2c8427f984e1740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137806 Malicious code in vina-bakso1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c87f371a6e974b8845dcde92d6a092a19bd486a53dfd232eed7e122af2c3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136912 Malicious code in sick_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb673eb567e626e6dd92e52bd3667bc5cae44f05bc8b85892b54fce6c2d3261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134922 Malicious code in kresna-tumis63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdb88b10094b4b709a725c2dfcb33ffa98742ff0bbbc4face1bb26c8531edc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132948 Malicious code in dusty_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65dfb4cc3b6679e6cfd4521f7eb028c6ff360957ea5ea92b6df812a28ee60197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133209 Malicious code in erwin-lapis44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d2f63aca8f3861642592794687f124e17bd7f602d1c61fa47fc365c759f51e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136302 Malicious code in putra-brengkes32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdc27f0647266962c81c2ee90518650054cf8397da46791696314d1f7bacf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-serabi3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726e29c517f48cf9e4d2fd7c9d7ff0b3b77392c5167bb8d068058c6d602ddabc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1db54937fc7757cb7071a2504d9892aa6e873bda8317f0e929a74f6aea2c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-tahutek13-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2f79d4c31634612e3a70974c05df8e92f1c86b317093257ddde235ec3167ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...