MAL-2025-143406 Malicious code in hugo-tool-ignite-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6de72519d8b5e933f1a81fc3a4e2a4588141210ebaf18faa2e37aeb8b7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148691 Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149189 Malicious code in vortex-postcss-loader-auriga-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d10ce1ac30588bafdfef6bef36489e659c355f7c931e391a7ccbe7e2dd3712a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-terser-bulma-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b5d4a721c3461428afed260576084177aa8a1f51ebdec6342d0cc814bd1c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-cross-env-private-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88c2a543087cca637adc9f032af927567a7bb085fe36740081d91beae1d477a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xo-metalsmith-soap-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3eed56ac6234cf263ebbaef75ed8de7d887c7664524ec5fea3555447a22a469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-electron-relay-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b5fe572a26cb12ea989b18242cbfc51386be972e2424a2d2223b5bbd8d58ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21acb639bbf2efdb260ea223c2b12d93b35a5e8077ec424222d65f38559509f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139006 Malicious code in silent-maroon-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d342cfb1987492d9e7393acd466c73c662083385ece71ef299510ccb7f393ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138955 Malicious code in puzzled-olive-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 000b44c3eeb8c6a0e1289b0d1f78123ccdfcb7867e1241d926793c15507041e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-tahutek2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 227cb873c57e1eed2eb867288f56c799f397506eb0d2f92cfa7802cc20874705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambel24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2135a84cda64a09dd0e4e91546007c8a8c02d203ea39cbf69ade73e6d052bfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-nasi97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d66f3a20d5ae128a908867eea2154d7bb72f07a53cd2d58b39698f00f2016a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-tahutek9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9364fc9b3752ab0a481667a0de265471af9936bab820ebc0920b8808216bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-botok38-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9f904fbfac91000e71bc58a26cf273f8729dde34b87a827ea817d6309ce699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-gulai63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c56816dde137e6ef985ac0d96432f2dfc515e16719402ffa46c5b30b3283823c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...