MAL-2025-144993 Malicious code in mini-css-extract-plugin-release-it-antares-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f560e4dc28499f01e23a21ff3a7f9f9933e46e15c9ed192660af888fe635613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-hermes-telesto-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f05603c93cfaeafc003a0bb58e349f1528f7bfddd502c3d8ce69b79a2e58f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-rest-elektra-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d31685f1be57500276d60c7eefb51aac804f95d4aec096a79137159ca4ecd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-flare-fomalhaut-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25798a5d21cf8bf514ba263838d6f5650b41aa8b2e72e6e22c72dc364547e4ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136706 Malicious code in rina-klipo62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a961cbfa838831264e5cd9358349c4ea412cb7e605edbad6787f8555f31f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131081 Malicious code in vina-kue25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6dd4505d1c1d8b019376fab8e72b71f4ec2dbde74760b2c306628ef4f99eef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128309 Malicious code in lisa-sate81-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b398704d88b733d0190462f7ac3ef0dd952b47a9ac2cae00dfa1ff7c87ccf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127275 Malicious code in ida-kepok52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81eafe7bf19349573de0831b35e06f044f18eac4a4732ed4877cd9eeaec8a0f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-peyek16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4058b79c9104bbfb9726df97870aaf80f1b8d939a8afb0a8b6d4b6841fcbdd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9a8f65251d743b083cdb2d9248e2decf816ce5be817a23ed38c3dfba9c98c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-dradag25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f402ade6db8415aa72830e27c4bc1dd969d8f688d413fc127da4923cc707f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120169 Malicious code in galih-enting85-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad637c0a93a8af6d3a6b182e7ea83ebac67cfbd4604121753883d5ee0891def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123957 Malicious code in vera-gulai35-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9e8ba742d5ca7a4d5902dd468603151d6d38c96e6c5df9b6b6b7cd7fa9b0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e3fcf8aba1267622c1361a6cc8e316c3643cf906d9cd559a8d5bbaf96e9bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117991 Malicious code in wati-sate12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cab81b95f775bb005e697f6c80d958515b2e4f05016b37665d1cbc9c99d68676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118180 Malicious code in yabbering_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7191fbe0baa0d29b907c1afb9443856026053d349bc45d8db5f5117331adba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112181 Malicious code in peculiar_haddock_harlequin-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81624cc61de0279de2a2e40826a7d59850a289bdcf7831e2a88517671b282c95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-kolak42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e9a75a23bd75346fec065e0003463bbe2c03ad7943a621a2ab56338406c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-gembus91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2628cf97bc8db1b0014edbab8aa6e726d946a9fc05e9fa9fb2b459c9ba23ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102517 Malicious code in fajar-menjes22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a77c0d0ed18662f8767bc54ecc10ab9a14630c8e632526b7884bb54b993e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...