MAL-2025-155444 Malicious code in guras-nutra-nutaas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54d995e30ef98957b60a95e54a0876003dc6fa46a8360a6eb906d72bcfd942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148661 Malicious code in thuban-postgres-sails-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f7468dd28a43df758284eed823c6994c99de69405aaccd16f7ec88096ee61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144674 Malicious code in magellan-webdriverio-shelljs-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe19c56bd6f39887588286da4810ff134f86ff606f2b2f0b78472dfcdaacc39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143209 Malicious code in heka-nebula-rollup-plugin-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27d54fb6425d7716f20259ac15707ab8354e139d9a713e31dd0d222e2275140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146506 Malicious code in prettier-stylelint-chai-sadr-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659659873187b6b39b84127b874e1c7a05cfee2e75ff63b419f43024e58113a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in element-ui-chariklo-cosmos-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75197ba03448017fe615a62698da8edc89774b37ebcbc8c555cd1b4b1bfeee8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139978 Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebe0ed93a195f1e90b9597a17f9ae38aa7a191ea284524761064ec0713b9439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148492 Malicious code in telesto-element-ui-sedna-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1558cdbfab08f523afa0967a7618fff89ba0c0666e98e2cdbece56425acc7e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141340 Malicious code in csv-ariel-sirius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0e61ae6839d445fb388ec17f3094ac1fd74c68c9d057251528b87749bff4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mangut42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5f96b09171ed487eb27a571cc3bfbb848914b8a5f525fcef3a04e6b5444cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd0cfb36f63a87f6eeab41d83ea297e4b55d42ae0c9143d25d201b0d316e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135356 Malicious code in mahesa-dodol24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f5fca564bff1edc3aa6214ef64205f90ef1c5b0df87d774d864c137ef11aa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weird_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce40132e0699519dc73b0a2e19b9023d1405db54dc2c7594c9a86808c787d01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130433 Malicious code in surya-toge56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab11937768d6d073cf632497c2ed83d6bd8f6f67c0780ce4b5f140a8b2965c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-lontong86-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f64bc5b7e051f6f150b5e0c1e46e6174a4f8fd56a8b3024a1c17fa9c6f85e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128878 Malicious code in natural_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b20b88c29c19fc4e8c29029bae380c8d953a945cdd0f0ea99d797a2a28d20392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee428f8fbb4772dc2e5c514af2102933f98cc014027053d8dc29f1df77deb333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e51625e1faa03e26ba295a210df6f06955cd7824f2ab0ee71f2f6b6ac9297d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...