MAL-2025-140038 Malicious code in blitz-cosmiconfig-google-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde950127da342b2375027506ab6050f96edbff872c390936286f2f3ee67fa03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149702 Malicious code in xerxes-csrf-quasar-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ece8023c8e2dca4ee014eb30b3c00d6725308eb81dd21a64d4f80a9bf4c6b35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149380 Malicious code in webdriverio-private-orbit-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c34effd25ed669028b7d3c9e64deb8764cf09db0a0d658a5a7103f33a904ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139195 Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148958 Malicious code in uninstall-helios-geckodriver-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be46e5e736ed22f6a90e0fd254b6547b4d2107f80b556b56dc10936c3ef7b7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139099 Malicious code in victorious-gray-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8db8ed4892456becbc29f75ca434b652639869fa93ca9660a234ff93e9284f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard-emerald-cardinal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e44d60c14c51c84d88f48ff15851f928b0fbbc195366643a4d8c0be03783fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139109 Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-klipo19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8897238f96fd9d928b35b2272ed9def332497df373345ff2272fa47b2e8431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-kentang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989cf3fae8c3a3d8e6352fb0fc22ae139c88385f6529babc3b78e5191e4aece4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-serimuka21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac6e332f084d42067e8ee042c0d0c0eed896c5512431c0be9e6b8ee233857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasipecel32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d99477926b21e96bfb4a26999e59bed6d4daa57068674ee61af94a1bd787cbe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdefd90eb63079c9382cb7876632ed6982494906d62aad96a9598fb35b715e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-jamblang87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b661e8c0f83f80a7e1d60a155b3d5f68749780e7735e351086afb151aeb037a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-getuk54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e1fae2a9531e565527f4b81ac837b9c2219d38307262d3c4d30f494b4b856d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138116 Malicious code in xaver-gulai92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2454368eb3d668ffc1849aaf9ae0ebadaba052f7b895107d11542fa3a48369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137329 Malicious code in tiara-tomat40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e42bd2185d4f123953ffbe1cc68affffade15c1d9a8c7ebd1204a96257eb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135824 Malicious code in nina-rangi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a148e7c7fbe310177bdcd0d2d3ddc71f6fb1a09eaecbaa112bc3deca408e7c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...