MAL-2025-141031 Malicious code in config-lyra-solis-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93918839bfb75a9a119aa6c35c5cdf81d305773332ba2da44822c50953cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142031 Malicious code in enceladus-nebula-fornax-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9c11c5e234551c51c428218f768448a985e46be8ea1ada6b02335b438eb02b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148524 Malicious code in terser-jsonp-version-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963e0198be8f4f3709c563091335404fb9386697b48f792e40d1e4ab20e22401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142000 Malicious code in eleventy-kastra-cli-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0d2738c6701f3cf8f2dc39e73ecedc3b6742f1a59ce0ba3a0544ada76ab6eb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142438 Malicious code in fetch-cordelia-mutation-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef328b1157a8e232281341e6c108f91fd45825a6fd360ba22b433ea28a1f351d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141260 Malicious code in cross-env-nightmare-public-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89aba308c0195b2c6c00b9e83e8ad088d62e10fe41045b98ace2fcaac2f491d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141724 Malicious code in dotenv-parse-variables-jwt-soap-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ba016402a8e1f026cecd68e7a2e6cd6724f0a32d050b391c7016e08c40022a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30f94515d5dff50629519f5e6393d5eed968669ab722fc2fd5e6e257903b5d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42f62e5f49571a9bcf03399533c3179b358e0738040bb42e0779678e2c4947c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale-ivory-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0842ec1c31403be2c9b18ed3cf0c753346837220b3bb8da64b35ee217333cee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin-copper-leopard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efcc0f1de88592b65577ec5b55c94906c912e7d33987c7e1317e84788125adb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty-emerald-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0fa4900235fb6f238809419cd02afa43297d01c65ffd16ba7c6e7afe2b43ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sporting-purple-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca32dd51b46ba73c6074ac085243193562b7af07eca152a0375c42a229ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138756 Malicious code in gorgeous-plum-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977156f5b39bb3826dc8732c1021e0c926f3a9f28a448527f6ede6babf8f79c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138946 Malicious code in prominent-peach-donkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c86b8cd91a495289e4841a1988fedced34e88bec52dd84e0987e332faa9f89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68893e28a1a71a76c70c26046a652421378466b122c161effa6a17d72cb1acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f731d67a68c950d922382e6b13673e4e247d78be180ac204e1c2029546285c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-lupis79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286b8edbbbc9d6d63aca6511d3d6adc13a499419303e0cbe25f13ecf4c8d38cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-papeda64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e3c8c6aba362fcf647afcaa8d07e46913ab3f0c1c6e72ebee7bfe909044dbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...