MAL-2025-149721 Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7c82516605ade34ff31a1afd6d028c24b9db892f1c0ea2e581b868bd8edc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143997 Malicious code in jsonp-html-webpack-plugin-epimetheus-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6b48ce6c4a45cb2fcc599034b019f71452bdb46a97116784b1fd1d4b5b2e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141466 Malicious code in dagda-deimos-janus-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1290fc2f8be734219db0a077bc5fc0b931f6e5f7c37bcae6290b03bd29ffe73c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146524 Malicious code in prettier-stylelint-winston-xenos-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b65e57c7104e9d7b684f7a4c5f402c844575c8a57bd91d2dd386d718e0ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142666 Malicious code in foundation-antares-yaml-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c13361cd8d538077dc2c193291919f1787c6e62fcb69632c5431036d2d5186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic-chocolate-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d66d84fcfe28342c35ca4880f8e8c2c99807acdc60f3b9342d7ce0478641d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138660 Malicious code in disabled-apricot-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d2d62bed01605d4bb7bd7be840d37c28461a0fc640c533e0eb74c2f333eddaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-miebogor42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e6cb0119f0c6ba462cde7fce66fc0eb94276960ca8aef75b102c39a30aed59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-getas72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1babcd9ee93bc5a876b99e914fc31b6e7f7d182426bbbb659b7ea0c7173746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-lutis55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37335ad2162615004d4e0bca930338c8afcf1413ef047f0ea51e7a1a474ab913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mendoan84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457f7679e0ff400144d45559e13ac02021506eb4deefc71ee0cee7cc20fd438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb796728e1af4adcf3194293ef5216926f5833680ef088361b7a0c090559f94e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-bubursumsum63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15533b1e924a939ed90c071fc9359536b686baa216cdbf6f884e7434c1033a25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tahu39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b6eb46c72a2e2c15f9c1efb9f917a66539c90994c90882ca740986647e0bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138437 Malicious code in zain-ronde55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed734935129ec39069ff328f6d77bf854fe56b4922e880f94548d69e8c6c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135269 Malicious code in literary_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180fabde6a565e68e6fafac8817628ae6978ac5754de5553a2af2bdc039a79ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132192 Malicious code in bambang-tempe71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec94fc128287d731a44161d7780fa9e46b5b9295f143f8fa95337096904b9b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...