MAL-2025-188803 Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233ad9fd46dd0a7e882c1bfcb9e7285a3b2061a17d83c3b4f4741b2d6cb699bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152491 Malicious code in alvira-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e0d912ae87e34625a51eb6dc41caa62cc667afbda7bdc528ec80a8b51481a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bc6f143e9582b48754cf9d7909df4b782c45d7c78a1fd54b06833089bb3c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148506 Malicious code in telesto-wezen-mira-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146713 Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bff0b2371c9718a62b45c8b461c87c10eace4b9cd803171ec8c16ce0a8aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144401 Malicious code in link-bootes-framework-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6c563df6fe1722782e28266c6ef475dcd31541163f0920d045c902f8a088c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124688 Malicious code in zaki-semur19-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1738943c363049779c868e63b68aa221719cb9c25c7138ef0b7a94a1d3d6c815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119145 Malicious code in cindy-nasi15-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0348dc897dc53e933ce972ad805a9de27bcaf966c3e5c27f79ad90f6a95255fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-oblok5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0c9ac4f07d35551166aeffc84ac10f28d342b181ff2e3506ff85a68ebfe12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110403 Malicious code in vera-nasi77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b5580f68f39cf2e592c325f801e195bf827f2f575579ce0ee912a24242496c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sasag85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b269cd2cf01cf707757cc06c9bc68d6fe14a12aaac1a503454bbf462a7024a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93375 Malicious code in bewildered_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdd57f7669fe2c69c732d8b279f621dd23731710cd980e3ffccbb925e1f6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87511 Malicious code in kurnia-kupat5-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d1caf1f92447063cd3e0d267c151222e2531f61d5a6e167d331ddd5d5377d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-empal1-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d012f5a47cca9dc99ad501a25fc91651f484c15d5d14950fe974c5d61faff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-73748 Malicious code in joko-mie46-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50d5a57be71d3b16d7743fe8156db9b4f4dca7fb3ab439d7c695e46e869fe5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying-bronze-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d6d0d2ab833003e8fbf10b7dab6eeb89a6ccef496bbc11bc87857e599d118db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...