MAL-2025-140938 Malicious code in commitizen-postcss-phoebe-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0045106a7c2a84cb437a40bcd035adc53aae2e23c51b66117eafc2770f0ac1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142672 Malicious code in foundation-supervisor-carina-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b50b99a8cb8642debc3f086f17977ae108b50845fbb715a621dea9a9aa96ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147701 Malicious code in schema-zenobia-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac5ab3b7e3bfb60ff149b1b0a9bcdf4452c85f6e105a4ebdc330ac5e3d541976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-jekyll-async-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae80eb5fe94ed880a1e30a8f4eca1187c053f73941d55412553cf556160de14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miranda-cache-relay-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87c25fc48147bf1c6d99f70b5ca2cebb2d623c4e9b7720ff4dc0a30b4de084de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-gulp-cross-env-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e859fe91db2b8d01f208cfb25d33b64899a00b92a44b8787644ddae43a9f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-buffer-sagitta-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd25da2ea12c17bfcc8b82c1f080529ed705b80141907868b255187769fd4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-lynx-less-loader-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b6e9c51d8df792487558370f33d75af46a24800c3767d05e9a4ab2115d7011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147655 Malicious code in sails-node-config-ganymede-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fba4305af6bddfd9f0c895a9f44e9b8e946eca1f3960f7f3f353272cb8360e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145220 Malicious code in mutation-electron-ariel-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 135b0d2df12e34290fead33825c7864872688cb11c7ae9ae435f360558c43e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143844 Malicious code in janus-writable-warp-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51d3aa24cc2de9f80b1ae9cdf8a0674f151e45be27c866b3a42d3edcfa0d9491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142776 Malicious code in gacrux-octans-install-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f459054cf2b975246d8f9f1230a9f2f32ab9a8cee1ebb4b00938c60accaa03fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145296 Malicious code in native-terser-polaris-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410715c45f41aec0740750247133ab9f8599dd362463cee33e4bfeb11cc100d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138586 Malicious code in alright-jade-armadillo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7469f2a081d9b88657ecc464dd738f41968414e838c4721031fd172da2e3154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-tapai80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fe40ffce62472cc3c445184704e3b4bb9f60e6db23844c4850217976af2a35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kupang61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd499d282947312d3697e6399edfbdddac7d5b137f3c9d42c07c319e3ff8f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136921 Malicious code in single_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43f3820ba69925a55ed65a75e100e3aab9db99eba5667e347eb1b3cb3a730882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135108 Malicious code in laila-nasiuduk28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8ef9544e10c0c8f08849aca543d5f09e7b0aa3c4bccd954ae638098765e80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136001 Malicious code in ogi-miebogor37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ccbe7478b7f6482c876a42a3241fe0d859de4768d496c2ceb77d110bceeb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-rangginang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff7cd51f259c429462d09911fa613cd8f04dc3c0e030cae78d53cc5d295fd8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...