MAL-2025-141138 Malicious code in cors-slidev-json-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab7ee1097a7df9774ba57469dd259df17b9e9111d9a59f5f924b99d6102dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145668 Malicious code in nova-slides-concurrently-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349c57f2f166e822672e88378a5b6c838c5bec0b5f8f03aba07f0521268c16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-hugo-phenomic-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144331 Malicious code in less-loader-sqlite-cressida-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfad0409b327a1ff625e51df8e7af533b188b1956e73a702db2ea2f869b010db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148345 Malicious code in style-loader-yildun-prompts-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e06e518d08420897098da573134476b0b7ca29bdd2ddcaf45fd6c7226f0fde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140423 Malicious code in carina-resolvers-jwt-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c175874bc0b58a6c800289edc50a2a6c585a7146bf9f39355407804118a5dbd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143895 Malicious code in javascript-websockets-neptune-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40c1fc54cb251468d40fb099bef3a0d38a64ef7923792843c8cd11d5e3554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146341 Malicious code in polaris-flare-wezen-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7f1701576b7f75072f88478c01ff68a76e579fe05dbcf5a902e4bf45b63903e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149221 Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143851 Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138947 Malicious code in prospective-indigo-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615170e63c85a8c696264d65ce77a67dc95e4cc3fe9d79788c1bc5b8e65950d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138991 Malicious code in santuyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be22e0228ececf4b955da10274b9cf713201fa8044783db3b90cbcf2930e8643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-wajit36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb63b059a74fd53b1afb86c8b565e69b2568203f1090749fbabab02b017b619 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-keripik100-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7bdedbb41912f3be55668d61c3696232f8fa00fee6bb9c6f2c06f8a6fc12a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-lodeh54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51873f8ca1bbb5dfd1b070294c153fbb4b2042a34dbe05bf13a27d93c2294a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-tiwul23-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 679073f22baf86b40abeef4027600baca7d5b2bf10d339e43af89dfe89159b04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-lodeh89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef335d0cd7ee7e4c18d79d10ec472237931757dd7f095f741cdfcc1ae7531b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136310 Malicious code in putra-gorengan28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed18fdd2ac7ea3a3e1ac1a59f1dc732c8607696ee520c811a76b33ec504df9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...