MAL-2025-143377 Malicious code in html-webpack-plugin-xenon-gacrux-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8797f8c0a1877750170b218f6c97b2f623a50b4c2e852e546a045d85c3cf496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139155 Malicious code in shaky_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd5cd6e4b9659fadbfceeaadabe8b3c137cd2fcd97adaff2f97d46e62e1459d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139147 Malicious code in narrow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70a40f34ac270e32d345abe4cf6f6faeffad82b24fe6c6f9731a29532fcad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly-crimson-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3101df7313222040720e715f30fd263d1b54ac065addde909555afce2cda34ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-bronze-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef9e82aae009594b04b907205f72f7f67bdd69d69937a6724d0c0b84ce246ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139065 Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139104 Malicious code in vital-peach-chimpanzee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e360ef67820510a0b6f73b56535080f3961e593c60ee32b21db7d19e0d4adaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138829 Malicious code in legal-plum-goldfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc9ebd375013a5644129963b13bbfe677aa152d42050d992c415721dd6c83886 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse-green-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c560b296b026efbad260c5adbe13f04e927d1b5190126560c0ff25179ab065c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-turquoise-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5f5cab03121ae6bef2a8c9771efbd4029a1e16889169269316a450f9f843aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138787 Malicious code in icy-lavender-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f86cea7c1f72402b06e1fe308c7839de3e13defdba6346389a8a98604789e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap-lavender-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3102ebe0d1b896ec2df366bad0530f730278d9f7483883ec08967534fa2debca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint-chocolate-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c29dc28c671c0f42a9b1ab5f6ff9d4be82161b6e143a22c86a209b9d427884a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in revolutionary-cyan-tahr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a24a4fc770dffd96796dfb947b21138e36338d3ba6abbb7baccba46f8c1120d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful-white-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e422b66bed3d80f0733b0c7d3c2bea50a5c6e7745260fe81f61776f9c118c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138583 Malicious code in adverse-green-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c560b296b026efbad260c5adbe13f04e927d1b5190126560c0ff25179ab065c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-tomato-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b00a21a7205d596964651bda256ca7a2fd53a0127505ad4fe4320c3027cb243e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual-black-roundworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12317131eeefab57a8a0ef18143ae04c2c9866ff86e5d5ceca767ab54a9015cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12ea5a345a496d72214c024529c2bb27ccfb03a04c02807aabb48b670c7f912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-mangut42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5f96b09171ed487eb27a571cc3bfbb848914b8a5f525fcef3a04e6b5444cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...