MAL-2025-187930 Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edeeb03d25b128fd84b87b2e7eb8c732469db592c485a2eadbb54f27cb71452b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187190 Malicious code in good-chi-nu-info-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f42b6bf2a01b6334b369bee120683abc5377dbaa3c0215c6a61aa6e01154bdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182810 Malicious code in itale-adci-akontolbapakmulfi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74df865cfc82a36b129a9a67d03842314a9bc49b75bef343ec3ee442e4a2267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mok-lukni-huj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a45d12ca8a33650ebe28437b557af6c915a2715bab87ad0415a2712066d66ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178682 Malicious code in sgoodaini-sanuga-nutabaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acfc27b966e19fcdedc60238a5b29a113fbcc631931f600d9fc789cfdc5d1a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156408 Malicious code in inal-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e6a533c3ffe94702afdac91dfa0ab6e7f0f340265d94d71bfd2e1411ffc538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157011 Malicious code in jeep-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a49c838dcea3e2ed6cbfb080ce63eebd1898a01e0a4576ee7c1bc298586444bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168239 Malicious code in tealove-dana32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b880f64ac3a0fc6f52ad59e9535f724ce67c13d99f7b2ce83b6ea8c8e82dbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165107 Malicious code in riyanto-123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce3d7ef3612a0e7ea2dab5d367b480bcb8a85121a21229686e82d3240d9461f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150029 Malicious code in @mipta1/gfhs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee2be25c15e3312222e0eb743f76a0807f707a1e68beb348562e06e4dfc0a8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153580 Malicious code in avomainah-frauu-faqifda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f711c36a6f8d2bc228c0b9dc2459ead7db48f4ebff23162157ceb9d81f102557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154314 Malicious code in dia-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea962b43524f0de179038c7597dec087561ff7b20781b425a5a49ca84452cce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-jus54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e10f8f1237be16fe0d00556e34d049653816cfbdb032cdda530b295560123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubursumsum84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148a15b22367725e8eec9dffc286bbae4eb2dbe17c871dd4b965d50532bf5b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136258 Malicious code in preferred_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3827b70be43fb5f283c479562307d073491285cecc953d5423fd4cab95aebfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0ba3c93341c86ef37421446b1ed4b2d0fc50c1c4add487b4187049b2693a01e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114158 Malicious code in galih-tahutek80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28034c8e15c2d4c266821ecfb826e90844d26145ae95b2eadc5136021f024611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_heron_azure-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5227543fd581a3c36d3fcd61a4859f4d00ad5b0e8aaa68a760cc3e6a127d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99216 Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108653 Malicious code in shy_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f628f465cbe1ca35cc506f0e037443a927a7459c7217d6045cef4207b5cb6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...