MAL-2025-139927 Malicious code in bellatrix-bulma-postcss-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae5404a833811b66ae189517e867b655010ebf4f69b88a43eab14576f3f8879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143371 Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149389 Malicious code in webpack-bootes-ariel-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8573a4b37c663972062823103ba7285feb49c796b8152c9679f300960422cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143005 Malicious code in graphql-loop-module-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86ea94a77cb0553e830c53e35a9681d968d5df4e3cb1286d1736152b291533c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145253 Malicious code in mysql-lynx-bellatrix-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856a800db8c30ce2d2de043e462c1171f0fd09be9141a40dcf6d159afd069206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transport-draco-blaze-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207ef2ba0846e5d36f057c85c4930563d7d0622d6842a09081f634ce315dd2ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86dbd8d335bb7ab0960cc1ceac104618c08690daaa5868155958023662b55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df460ff6b76f4f64063dbe2db77c1239448df591e6fa7426bf036843ec15e079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling-scarlet-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130fa73116bf0363dbecf9a3c9d04adad4232037eb140362b50f2c64c007fef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-indigo-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97990c3dbd394d32a692511123a3cdffa4c9e1432225671b64623153e99226ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing-gray-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4e04041645ccefea1a7b4557022e36c1affbe69091836280e14d0184b2b7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful-jade-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ecb2ac8598be651c2152fe5a20f5c14e2a21f21a99441ef5bfb2abf379613b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mental-coral-lemur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa2f011f5f42374fa81d64113d44a6a3a744961ecd03c25bade994cbcdd3cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming-blush-lobster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e709e96bab986c44dadb6fb6c7de4e78675b81995e987bcd9dc3d6e00e22960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide-violet-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f50135ad83a162ed7b6ea016caf95136fdc6300729a22c7cc0c2469eb80bbc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-turquoise-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d331943744403a816a9dfcefaf6cd03296c4dabdb773aac590bbee69ff6c1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive-amaranth-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8360dffed6c70e9c222c697a15ab756366193c77dff4a7f17660630761ee9db0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant-cyan-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85ee89f191c9a7dedcc977749bc2c118ee67eefa80d30c38aea5e284c2f35d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...