MAL-2025-143076 Malicious code in grunt-sails-astro-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118a3909898666efc110e25978ce2c8ebec152db2edc41191d6cd9849fc4c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149462 Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142298 Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144713 Malicious code in markdown-polaris-vega-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae813a6e84ccdb08cd5cb8ebe0295281892305e93d57e4c85684c0d77a016911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143896 Malicious code in javascript-yonder-mdx-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a05bd12471c26111582fb880b7b86a83151e218c40d900842b30e9e5b6c8b84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145206 Malicious code in mui-npm-typeorm-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6314a131d3ae7ce58ce6e7f2f0c12949b4c1a9bc4551a6aa7fd2968d2e38c876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147272 Malicious code in repository-lyra-react-bootstrap-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96745fb4e087f1d2fa6cc12f0673c34c9c89de6e5261f9db9d80208c34740662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139049 Malicious code in striking-tan-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61c22239077633e5a19a69a5a14161c6d1ed6230bfdbefec065a2d46f2355b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient-brown-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08561742a4b64dc0950f7888c6714306acc1fd50e29e1b8e2140835cd7bbc75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139122 Malicious code in yappy-silver-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3933638eeabf1e792992df13a3baa51c013cad85914ff892b6f37087e5065db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3ad49c2b098391a9416fe1ee8b6d373ffc57311fe592fa9b2d5891aab43d32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137746 Malicious code in vera-teh50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e54cc9f4b75383525ab4c1f1cf3259adc92c60f9eee266b27e81ee0bff7bbc7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135191 Malicious code in lina-ragi30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9975f7dceb26cf05e6b6b11c530977bd81a6db356a03dd6dc342b11f2cf33890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a4604a1826d54b7bc541e0631babd48b1612336836bf404c83038ddc5ba0e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-tumis26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09db09913625910006a5cad54aee51149cad7905645d6c594fb51e2675d43bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a831551eb0af379a425f58d6c147ee08985c0d4df3e73234b9ae8adfbd63a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-lumpur63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3002a494ecb5ad0d36007fbe7ed5988edabf765be5bf6919a730e39f23fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-klipo11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97704248154bfdf4f347b3cdfe8f7b8f9d223d4ca2231bd2a580e8387eb584c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-tek59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4248990f86eb95ffd8f6ccc374aeb47f7613ebbe6593bb0491a5b41b38aa5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...