MAL-2025-186753 Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188960 Malicious code in publish-vuepress-sails-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8174eba67733225bc2a363540d7f5712c22849add86bbb13c447eb8e2266a409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188142 Malicious code in mui-norma-callisto-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50dd2b2d8d78ce8e36999c312857463758a39ad904e094dc54163e473bf5c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189180 Malicious code in report-epsilon-socket-beta-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a374b6f621a7480a7de9e738180564cc75591db6337a7b845ed16decbc25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185829 Malicious code in biosignature-install-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190255 Malicious code in web-route-final-nu-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5c7be5f1d5e20af05a8a41845cf88aa11d49fe80adadaa957e21395a29b1a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-badadivudcuafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdf5c09bcf152d7ad888ad15e62ef4fa8a14df6c573e1c620c5e2d2eba324ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kisut-diufg-danuamicfuifoa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 179c5e2d33b4c137b33e454eddf216fcfba37d5f4e616eb0cc0df7c6ac4cfa39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flights-lutuiog-aloin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9200293453d2e5c3e34538b0137457195ae9a0b3e2bd39b87c9532742c4a6705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modaiv-klvu-bba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae054998aa18ff253d9702d18f41cbf63bde4361706f00b4a71f3ffc53a17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masolv-ilo-cvaihu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f48df2be2770abc2c0d65f2b250ca333e81da77b4016490ef8b1f84047acb1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lobac-ub-afdu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e80fb8e41c4d94f7aa38d5a729ecd5cb443f2636b59d5fe34aa647dae90387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modiov-kihan-avcafivvuaviagfavacd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d87fa50f3dfd346b69f6f120675d953669ab105f2f519b84fce15cc58751251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonec-kat-fidulgafucfav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff3ba4c89cbd0a14f506bb0302a41669c8fb575057e29a8512db5cb2c3fe504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avangs-olims-noliu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3df62744d845f27f36c1f2021566483b119f0a95cffc5673b84f7387e01e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololghyhbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744682a32a06e19441414050cf63c3caca95cebd14f85c3c1a96481a8cec0964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-koig-timesxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b5ae92ef5cf5f7a898ee50bf8356005b3ec3ed7a594eb1a4cb040582649ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mlokok-lofki-afahugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7eae4c0606b881eaf1d5cc9ace7cd68e85afa28d1269cc3fcefda0e329d745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itale-adci-ggpantekkkktololgybu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09053def6dcda811d9337dc4d28b9a83eac24c39ad8ae5e40d1e217de9b81040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masv-ilimo-civufava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f97f688cbd4c34c24a563c157919f62215d4784fd874cb0b313087e228d7b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...