MAL-2025-142348 Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149390 Malicious code in webpack-bunyan-xo-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5edbc209cd1ba1cab6f49ce0e8c5c7ce4cd297e85ac19b2bfff0c1c77377034e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148004 Malicious code in slidev-duplex-polaris-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb146b0c2ed00e687cef5716206c265a7be0acaeff3082bafc48c1e54e8872ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148907 Malicious code in ultra-sass-loader-pegasus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4582c937e56d01f391201e9c3ab543d08c5f1fefed78d980ff35171b20714de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147571 Malicious code in sadr-prettier-plugin-markdown-carpo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b15cc979aab6570e634d54c5e1e033330806b975bdac0cfd9242eb7f9a687c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144637 Malicious code in magellan-got-pm2-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851fa9a1251d2f3610e1280b716ad108aa7916042b919f38a9a34a14639140d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139980 Malicious code in betelgeuse-farout-chakra-ui-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5aba443e95517a5dceda66a7ac4feb006b2baf72252bb93271b21be511fc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147255 Malicious code in remark-meteor-slides-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb4bd29b5702676310ac558508cd9e3ada75cc965d0b2dc1edaa13c4b45b699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140532 Malicious code in centauri-nashira-command-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2759382bc8889aa98110e33c7872c4ddf1f73bdfd15d8b24712a94a12d0d9d49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 072a55a8cd70a5c9fd73bd2adee50e90c1391fc076290e349f99a5f1fb100a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-dotenv-safe-nodejs-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6919ad399f328ce955067abf86547693652653aed9b5c770929d62db585751ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-kue50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b618b95372e496f2e252dedda22b6450d77ba879910bee0049bf63cf0cf94de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bac421a1940996be5abe5cf4a51e144c102e2d4ecb5b0d0526b9d20cf0c1548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-martabak13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac350023fee160688a57cc3fc8546b6e5b451fdf2d58aa379fd7cb773b8f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakso76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89323aa65396c3d13d18a4b7c13d4e1cba7c56a435a71de4bbd632f30764c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-tahu66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2b889ad98e893e124a487981343e48fb9804759bb5137e9c2027cd183428be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-lontong7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed11b62d302a5643770366c7d0d594a7ffb428acc23f98e84cba876eb6b72f86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-nasipecel13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de56e3fa4b2396bc58be889c69ab519e6368047aae0c60335f754edf67f0a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tahutek81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329f2176f4a4577097666e16bd602c6b9a87ca862138b8d9347d31fe52cc88ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...