MAL-2025-189529 Malicious code in slides-install-dynamo-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2689948e6cbfaeb304ac245a199992d468f1461418520b8e49fb488504b8a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-templ-trui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7e430dc301094aa584361d7d378aa3c9b70191366ed4651e9fb6d738160e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177563 Malicious code in polymer-aavof-adao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95139fd29c4dfa512c59c45b9043f389afe6ae01204d27fe1eab7379aabe173a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157659 Malicious code in keyla-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f10493652898eea2331bb1213a2a3ebd16bdf60886ed1df6478c8fc7e2a532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161365 Malicious code in nabuf-oguuof-duafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e0e786274dc88d2707c59b9b4c5b3da8a02f13631b2010f1b518bbf8ef60a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145580 Malicious code in nodemon-europa-apollo-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e3a54bccec1d6be67cae423c8ec54f1711bb72830ad7f941d8f6cb8bfcfd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142726 Malicious code in fusion-callback-soap-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5f7eb96f887f38576869f47cae2da7442b823c576a30daec11038ac9b362dc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-jupiter-upgrade-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0743336e3ae92ad5c0414f0d4f6025343f6a1c877fa69ce7ba4305bca27db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142328 Malicious code in event-test-ganymede-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d553a01be402a08f876c80f5c3bd81ea7a7f426a4a848f6c7fdfb64fa4283b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118653 Malicious code in agus-nasiuduk88-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc05e1ce35a1a1a78a07f24ee5c745cb43548ad2178dd30ea3535f1f2ff0ad4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118954 Malicious code in blonde_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c18373559a81c687bd26d2899a373fa8aadd690b647ec306f55d3e40ef7526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116641 Malicious code in quarrelsome_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f2db7ec37fb1d015b5f40b39334873df4a6a8c38c943cb85bf4c18a9ced2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103173 Malicious code in gita-bubursumsum49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbb38a4751ea023363ce30d93f76f0391900a1de8951f0aa50c201139104c53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98700 Malicious code in endless_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076aa2edbc87aa859f5804fdb7010fa8568890eb915d204c04a9cb33a567aedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a037ce6a726783fbb87c894e113d39b11a98534f65027c38b5046120d9f10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85012 Malicious code in eko-serimuka30-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79575eff9197e84ac53d4256ecbb8dbaa400c216feccf2decf8fee6840b826bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93056 Malicious code in zul-toge47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ad1c6c15df4a109f07aa4dd0b811f595f0d29b1d0e63fe843faab632c75d73a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9033f4db009b0d91e40cfa1e8d0d0cdd97c92210dc83a4c23ff972c1d773b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...