MAL-2025-142696 Malicious code in framework-wolf-yaml-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5171dda2e66d0c63bc03ea95d0b716b25ed5c71b006bc563842e12f1b9b6ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140991 Malicious code in commitlint-link-rigel-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b8fa010bce1786502752abf23a3825afebf6de24de10513fa7eec8842bc29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d67a523c8300a06ad1b671247a199d7007231d224f410652f4ef2fd53da260af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-salmon-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cdce69503918b0ad255dbeb340a33f95b12d8418b4958f931f6f59de5fcc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright-jade-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7469f2a081d9b88657ecc464dd738f41968414e838c4721031fd172da2e3154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138981 Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear-plum-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ffd81f1734d7fa552bd5594dc59d95992e061a66053a76bc90bccdf93c4904d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-tomato-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09cdfbc7391bc8518fc084dd05454910e1f90cd03774a8fbad364eee9ed38849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-gembus67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65c0f50357684c2bf332d952db5569a56c8d24118e8efb468f2a0508053b1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-taiwan13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd83e14368a7ae038b746a32cf390824e3d60bd38714b1e6cc4503363c9d6332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-miemee70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d1248b905a511828334d52e40dbeaeab9fadbd71880a0028b6986cf09cac70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2066cbfa7d3cd212d9218e3274fd1152b6b8727c29379fd709217ffdd67f107e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-dradag80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2dfa35c1b9aef590b0e1de14e2244b9748a074366da50bdb170bc3e2f9116bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-nasisayur26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e1fb31482e5daca95f5b743a431cda0b572b3d7c179220f85d3803ae00a9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-toge82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a951097e5e8104c62775f84067ac09d56cdca5079980c27fd0b97eacb8b600b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-mie48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f5096c29d79df49ff195a3923146591785a2df7a2d72c42528776be0001dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kue75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25423e453f449eda885e7a88e0fb4cec35d259cdc90ab1ef95337887cf2490a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2cdfe9eb82955de6c60f0fafac9002e0790f448850ba21b127e1627ad37c6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-nasi41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307b71dcd14152fdca348dad786f8ec89638263fa4b0613b6856b4ee417af2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-asinan77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a186e52c7e0bc600a4dbd85472b4ddab26a0ddc53ce43108ff02e019b95ce898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...