MAL-2025-143608 Malicious code in ini-supervisor-ini-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29a32dd2b265a29cfbec53f5ec524396621a56b1ac1096d46802296fb8d328f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146965 Malicious code in query-deimos-semantic-ui-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cf5bfc45907b5acab89273ed6f3f985dc819b8e1e523366cd2846eb3789bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143717 Malicious code in iota-cross-env-socketio-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afebe0b6d512b1d735f630ee7d5d374f7dcbef74fdc224df629708d129a90740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144314 Malicious code in less-loader-centauri-subscription-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea8358fbb12d3db96e025bbe6eda5a0ccc017c35f9a7f8dfc51a6dce33f9cd71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140846 Malicious code in colors-csrf-rollup-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3babf499c271300aba4371a713b8f0dd82c891ac406c074b37358bb570d29f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141873 Malicious code in elara-enif-local-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef543fffb12161f3ec3777479f5e7d7b6efea83867841b88fa08b5aa7f5cb74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141050 Malicious code in configstore-enif-development-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145365 Malicious code in neptune-kaus-xanthus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed4bc4106be635c7d21bb98b4b77053a3e5766f1ebd1ecbddac9415f6f11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing-beige-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd489b8842177359fa3eb3daa060d55a112be54d2da42794f741e9bce7ab1457 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139065 Malicious code in technical-rose-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79756f833eb7b85846ecd66b15a72b2513b4a28a53a3e54df116a02efbeb293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138894 Malicious code in net-salmon-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8637a889054a27d0cc482fc3fd9e5d4d6630328fb24a5ec669a7994033f221b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138587 Malicious code in amateur-pink-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb0074ca7da84079367f873009592e2d0463a76bfc1601b654276cde150ac537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loose-tan-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83426f6d8857b3e3e9fddffd79b800060ededb0ff10bd0a40fa8869a6a454aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich-ivory-viper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962daf46b363032432dc2cb1157ec479478716cd4c2e0a266d362de454941a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal-jade-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77fd24d5d04814d0339e97be48906769d7751a0cd15f4eef9bac8dbc69c672c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahutek52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13166a5eede1b1e9de9846aaf496393870b05b9d500821ab7190ade5887ad58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gorengan56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a7db329caa9ec2b8e7279f1850bb100570b8c3f14d77268e0f715b992faf1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dodol76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f2207be71b6046927ddd5959003e31d21e4d27b14f4cced52dfd1aac06f7aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-mieayam56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f45f4bc16cbd87bda5c349309fbee2c6c57c7558c6e208e09ea001ddce91c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...