MAL-2025-144186 Malicious code in kinetic-spawn-stop-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb47a933818775e5c62b8dea554a34249eeb42e01db1355d2bff9c72fbe0b567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143658 Malicious code in inquirer-rehype-wezen-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e55d769614ab0ee9cf3e63d233ac385df04e37a618437fc4209773d35934c5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142580 Malicious code in fork-carpo-commitlint-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0423df45702b5cbc37baf7e71d078b0f9562cb82dc97e1f947dad1e3501d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140400 Malicious code in capella-wolf-testcafe-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295c79a4035522fd16a4d1ae5bc9c674fe03ec774676b7dce77dfea5c68238c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149875 Malicious code in zenobia-semantic-release-wolf-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f347b66bfab2ad3cd77af9a4c71ef499fd706c4458d617d5e954fd3e277f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142843 Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66410a0bc1e30fc0454724628ceba7714eb23da1d2d92889673e46b130e2946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23ce57605fa55e0e0b41f5c70af1494ea324e3c4b07e22d5bc4395adf36d81b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in effective_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204ab8ac0bc60fa20b585cd646c2793d0eaf2542ee355587b94d6d0eaf180ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba02bcf6bc040b83ba7e5e10df0a1bf19605012adf3ca501bb8edb7401b82ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then-gray-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0d9320f06984d3fb3a62debbf4c5402a26f333fcda6f7141ba558cd7a2a354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138782 Malicious code in honest-turquoise-elk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b24c315bdaaaa70ffde94ffa47dd1cace75a29f6a70c897672941508a87bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate-indigo-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37afcb136cfdd076602d69af9c7bccb5c32cd7da2028b47860a8fde2eac0a856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138714 Malicious code in fantastic-copper-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56f080f14db157fcd872069aa7162d09d6203c38cdbc56d3f1455484784b8183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138770 Malicious code in heavy-magenta-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02e0c8927e1efcec41bbca952ec4d9bfe454a025ceecad348420ebe101bf4a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139015 Malicious code in smart-tan-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6346393ce37cb8b00d5201fae5e8b195ce2de523c7d24b265a68e3f23021174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138835 Malicious code in light-amber-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c95233b8c518f92b155ea0056d0b872fbece596329cb8f1af94691d20ed9cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious-brown-hyena (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54eb2cdb1283d01c460231b7ae4b4fe44cebb1bb58d596ed8c5d5cb4dc091fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...