MAL-2025-144169 Malicious code in kinetic-elektra-oauth-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c22228b96f1f94b44857105013958740ba11c801df19863786af40a7b2b19d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-publish-koa-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c65c1ef134ce232577df13d5b79811447fe487ad8ce6ed524a8d47842e01d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phoebe-lyra-jovian-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bc32ebc49eb4d0ea415043871829bf5692929f674c9417fe1b4e19bb5d15324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144976 Malicious code in mini-css-extract-plugin-heka-miranda-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed1fa0070a7b54d9426e52227a9e3f7dc92ed67265f0518bd45fefc50d15b0a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142471 Malicious code in figures-ignite-typeorm-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba65ca8d3db100e2561aed3aa94db75191efee78aa8dc130f06a757666bd98d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139650 Malicious code in atlas-neptune-postcss-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3642a23ed879e58d8e6a28ce1fe2b4842279d353ee9f22be6c766e7a10de4b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140696 Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139049 Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a831551eb0af379a425f58d6c147ee08985c0d4df3e73234b9ae8adfbd63a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-kupang99-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9184f78ee3b7278d7964b7246bb6c6f89e2f6dea5f447b427c5bdd16681a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfd0cfb36f63a87f6eeab41d83ea297e4b55d42ae0c9143d25d201b0d316e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tumis26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09db09913625910006a5cad54aee51149cad7905645d6c594fb51e2675d43bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tek91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2e254cab3f5e63229856e8c94bf1920f0bad8d12cc080fde3493bdcc001f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-nasi7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf5d11ed949ad4c6337fa3d39f95b34003e61d376ede6fa4a3122d2984b1419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-enting81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb5bb04198280fa2e5fead86a6311b6525c2c000cc098c7342cd9360b911dc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-gorengan30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29c4dabe29a58ba64e6478fb6466f29a1c76fcaa0e4911a4649e4366fc841a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-nasi27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4d8f3fd85cc3019c4875758243a3cd15e8695dd2945abcf0623279de877a94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...