Malicious code in @ux-foundry/palette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd18fdf82036fc2f39aba4198fb081eb4cb5683f9b9308bdb2a0f8539c54275 The package @ux-foundry/palette was found to contain malicious code. Source: ghsa-malware...

Malicious code in elf-stats-gingersnap-reindeer-987 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cf3bd13952debf2913d3cda7026de4722754e97a2ad38af412cd86522ab9313 The package elf-stats-gingersnap-reindeer-987 was found to contain malicious code. Source: ghsa-malware...

Malicious code in mitouko-on-lakoik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb0921edaca69d1f0782e2c02410f57cf1ab59683e9cf2d3b7801f320e23b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anak-jalanan-mdn24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d65151300a586714948b439bcd15c5bd934a4ec8c82fefd1e471e5c7c8e7bb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e54e20580c3f7a9cb385ba037ec5daa6339ac2414981819da936f39d4af950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150982 Malicious code in @miptaa02/tod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd5a6837cb2137e339f1542f1de0166a81cfd4a4770f4dafdc20fa20e0d0752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152607 Malicious code in anaisisulah-pauflai-asu9aia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b412ba77666a5fd2d8b8cd4392e31cd408a556d31a5fb79ac4223535392cc6dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132191 Malicious code in bambang-tempe15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44127802379672861c26336d60e9e9e4b22462878ee3416dd4b835ac1f13950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-nasicampur87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aff79505f0f398f1d49cbc93141e20550285fcf5be1c34d6f4179c22a4d0f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rojak41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa77644fe68b7d012a4598c5d9aa6e6e7a720491dad5f911a02584f375997a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcad96448259a610c61bb48bdf9651d11c3ca570f8755ea4a62c1d53ebe8f58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118000 Malicious code in wawan-enting61-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6c9d6f1691c6feb69a44400d8cf9a7efe45afdf1724f1d13f4fc363e96b28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bc5bc96a029b449ac226442267fc8fbd34f568b3ac1b4486575b604945b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b9b451a49b5a6a5cc53b93ee25424bf787ebad55ff5f1ab19279c0fd52326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b31f67b52195a844c160b938cd4a978ea56e7d6fa2ffe3c4fd88b9f137e89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eed36fe6fb9407b3ad25a620e6707df3e878577b5e59dcddcf8c99cb757fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ffe72567b14efaa73febda22060d5825b909384996c2c6581105a10e60a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87175 Malicious code in joko-tahu77-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80ae053ac858d3bfc6bcc101070650b6980f384c1e81bf3396687102657dd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e9a464bceced4db35f1a010c75dad61f9a4983101e1a5a78715185f2d763b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kemplang21-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f69f7a1ff41b14f9940e73ac3968fd65833a3c3c950249b6d3bc33d28808106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...