MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141830 Malicious code in dynamo-meteor-slides-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ade6f541b404705505f9e2dcfc83465bea3aef4ee1280d3246806fdd04db9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148596 Malicious code in testcafe-hyperion-envconfig-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75325a6cd17ff0185c982e5269ab753bfab2e7cc19234fbc8456515a4ecc2381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset-teal-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9aed683c061efa23bac6961d116e752c5c30b9db88780b1407b374afcc64d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7cf8eed843d5fcd0842e0f1f11dd035a38e621a524b23c06782cbcd15c0bb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3996122074b551d003f4ae780312aa8b69fa116ed2866785630d4311392eb7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd974497ed94b7abf9221332ab3b4cb9a0e548fb36afcea0a602996e6fdc879c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783f7c3955209233af22e02bc979d8e6372d6845b4e9e4d4b83c56464ac9cfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132191 Malicious code in bambang-tempe15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44127802379672861c26336d60e9e9e4b22462878ee3416dd4b835ac1f13950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-nasicampur87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aff79505f0f398f1d49cbc93141e20550285fcf5be1c34d6f4179c22a4d0f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lodeh57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcfb74337fcb1915f46cd9841f56ef1a0d7254ad47580ae7fa4ac21e96cc8cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137597 Malicious code in uniform_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1f33ecb5ec0b525ddbff8fba5676a540f15746e7f78d53b712013136227520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136711 Malicious code in rina-martabak55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01edfa64443340ad5b81ca1fb176106d47e8a1af288212597ac5ac743f72bc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6faf2bd61a0c1675e212fe8dd8fa06eb4fdfdb754d96a7ed7d019fd10cb52d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8b7c45056824091aef786c43560c5031a4495f05e9fc9a31b6510249965744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a85a9a796b1ed5eb2d799f77f763a803fe2ed6e47cfb1ff7fdc919c7f2b7e0ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rojak41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa77644fe68b7d012a4598c5d9aa6e6e7a720491dad5f911a02584f375997a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-gulai28-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe247817a8da25391315eac31ac561d9e10dbae71f791fb7bd93154d5a51476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...