MAL-2025-143371 Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142538 Malicious code in fomalhaut-dynamo-luna-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b5a240a7c7f61dc0583aea5a0aa7715dc2ba8d7515b11841fdbe4c62140055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148865 Malicious code in uglify-js-apollo-cosmos-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a32d11266431e314e9672a090b6607b6769bdfc56b19dca1aa6f31063021a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145820 Malicious code in ophiuchus-impulse-google-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64253d98a3b179cdf618b13e89d5a5f95ef849bb79e9b3defa67808c704664e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147753 Malicious code in sedna-altair-jupiter-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 490579ad343c9d3284e0896905b2135a441bfe41f9fdcbab1d7fdcd7f8d443e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142106 Malicious code in epimetheus-repository-package-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fc976d3ed6b582841dba0a53f2ac7f4e88026b21109e58de73df97556d4ebc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138761 Malicious code in great-cyan-koi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79bead203127cff55897677ee27bc4b303765183b5983958974d3295bad368e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139051 Malicious code in subsequent-fuchsia-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f9369979eec35981daf24211fc2631aad510a816df0f80b5d3075e7077fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial-lavender-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be406abe776b818c911262390171900eec0aabd095ad292a6c06d14b14fcb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138992 Malicious code in scientific-crimson-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f47ea463fc9d144ba747e222edcab1a5d0d703cb6530843365c73ef5c25b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139129 Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138789 Malicious code in identical-ivory-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9801c2eae353d37f40917575b5baa1b0aa044d12e673eb47365b7e0ad2d5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-rujak38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe0006e69a3a6f2cd67e3b5535645d5b14ec4e7e8f9731c00ade473bae1635b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasisayur43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b49ec4ad53d3611e27f88d132bac10f8dc695ac3036f12799c927fcc5d0f6f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77686a2c94710a62dba9f9ee3a41f32546e71b766db1fa911fb7b86ae218e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-naget36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18071df5db6f9ea8de10080f50f7fa151b6999d1eee961070876c9ca22e6d63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6278f9a597732503eea330c3d4cbdfbde2aa97232497b7729ff6b2d47948e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-brengkes21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab82439b7705406557e584738f7de28fdaf968315a2de8a9d48319bab52c0ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-miemee65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ddbb3969da526c686c22af2a7db2786fe020f0f2c9e0a4596b1e8bc38344ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-bakwan42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9448d1a289449508a897c4ed4ebfe169160187b4dd84186fe6f497098763e43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...