MAL-2025-146733 Malicious code in proxima-quark-metalsmith-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4aae4c332685c2475875b54f3211039ce0bafed36983db9615d4497cb7938a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148793 Malicious code in transport-mensa-tool-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b711e55d7e247b8426e9450555e8fd0d78164118f6e17df135b162418d22abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145606 Malicious code in non-blocking-development-avior-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6100a1aca3472a8e1da2302a8ac42b4ea6b7790af85fb94874b2750fd4e98c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141691 Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146180 Malicious code in phoebe-sass-loader-luna-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8766ed20a92468a6e5475592ad000bc62693099496c56e40d0987f34f6cb7fe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147248 Malicious code in remark-janus-socketio-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da9e00c3b387e0d4c24f5c5bbfa1bb719d4839b704ca295d7767ad124b27dd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140000 Malicious code in betelgeuse-registry-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4043428c8364873adc4d1b86cc8efeaa27853ac5456f63216930f7c514557f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139156 Malicious code in significant_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f8abc8d4aa9ffa2fa444ea71ccde61df434e0d48387cefb28ef5183d25712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced-gray-chickadee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9d753bb45b96b642110c54a028a0db2a9d183fcb3f140c0f8771ab3e61752f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant-peach-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e30dcc58bddca5b500b777db9473dd477874723af2637af2045b58fe4b702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic-magenta-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f04c7f8872ade27f5db40c2e67335da5f2ac15c1382e1f71a27c50a821335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-indigo-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd9a764fbea22af91d1cbb9aeb458532b70ecb83864134fcc1b937c5b5558f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fded966376ff399dfe1c722516e6366d118b7022d1d25fc856574c52a7dc382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-coral-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa2f011f5f42374fa81d64113d44a6a3a744961ecd03c25bade994cbcdd3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor-ivory-grasshopper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071ed04d871d75cff9cb2a37f1e11652fa36307ea2f86f814e8f6bb3e8a3b697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138784 Malicious code in horrible-sapphire-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee24576f1bd378fcb99cdaa68b77c1ae8e426d0ea3c2eaf522a8c786f18258ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138783 Malicious code in horrible-moccasin-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b875d9a8130ba607af18ec9bdf3754378f955bb12c67541bb0d17703097adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138662 Malicious code in diverse-harlequin-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ee28df6210a54b22e0979313c1d2f14b129bbd0701896678ec226afc180bee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138899 Malicious code in noble-purple-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6888440aeb44cd76b86bab7082dbf1d12779111bf967e4213c05c038457c11be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...