MAL-2025-141005 Malicious code in concurrently-firebase-remark-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2bd0fdd87661ce67e74c146f4b7b9cc662fd907f84c6906e86d075e198c677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-axios-build-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-chai-celeste-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb53ad9f8260d9f1a374259b5f212dbf32617f7afc84f7ce85b009b16a3e5db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright-jade-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7469f2a081d9b88657ecc464dd738f41968414e838c4721031fd172da2e3154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-taiwan13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83e14368a7ae038b746a32cf390824e3d60bd38714b1e6cc4503363c9d6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138435 Malicious code in zain-pisang86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb2a8ad7ee5abefd4096053629670d5cc438047c7b86328dd10df2d0c4eeead4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128793 Malicious code in nadia-sasag21-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbda6b40eb6fae5cd0023b51045172ab772e4ab5e950f8ec74df4494ac2f28d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-teh82-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0920751f702a87b02fdb1db456a585829246b4dd8d5628594e8391f2d4b1af39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2d860b4da0030bda4bbe3a315e93818c59b7ee0d9679722c2ebfa61090fd05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lepet11-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d446420959f7e3852f1e0596087296a4331ec5bde06c613d2f349781afde6f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mieayam62-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174398574b81cd8481cca4e1aed9fd51f6fa861893322333e36c2a97705a8de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119968 Malicious code in fajar-ruwet12-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32167dee81a16b798e9886c996952f43a49e3462ecf701e188a5a65f37e812c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112882 Malicious code in bella-rujaksoto100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c800099707e70dc15f822b6a142555cd19c00d44e1105a26d2495b1ce29a592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 766088e0961e6660c773c24f302a08915f85fefbe2032887d5fd93b3fcf1dc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-gembus55-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961608a9c40ba29fae4c63a3be5a43a0410745500ffb17c2aa5ce2f615629370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117163 Malicious code in socialist_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74dd473ab40847d45580d8e62ffcb291b8c1b75385eb39d74350a7ddfd90b563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115126 Malicious code in joni-tahutek37-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d62b33865f9718e1ba5828afde7213a489d443ee716ff9d9325a4f36233c86bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-lupis70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9acc8b75bdab4e53166c2129571ec507008583f321ca0493c0287e4dafe86309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68889611a593840fa3f7bbb206ce2c6a70c89c3e24492cddeae4468b91d34965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...