MAL-2025-141993 Malicious code in eleventy-csv-envconfig-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ef3bc58089df1fd8c787fa0c6b3f40c2656d4f1cf48409ae9581d82d97c9558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142887 Malicious code in geckodriver-upgrade-upgrade-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7eb7f5199d42872864bccb85bed6da5647e35478b981e790fc8cdea403f99c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145754 Malicious code in oberon-redis-luna-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7dc99789c6a0bc0bffec45b88cad0cdbd527b9612b08e1c1088d1d9fa367c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139331 Malicious code in alphard-neptune-nashira-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91a961cb47f375ed243b7963cdcb585a59ead67e3efb4f59c6066995c3c1b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141432 Malicious code in cz-conventional-changelog-request-axios-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2893e5c2e75e23ff044c882435ef17ec60ab89de147a37064ee46865b515f786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146240 Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573304594207ecf8910723db18dc49d6e07edd5c5aee43c6a5ddea60ab7800f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144254 Malicious code in lacerta-warp-perseus-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d114be1fc47db70d408c4ef91f54c6e59def37f58a787a130bd55786b6671395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143652 Malicious code in inquirer-nextjs-galaxy-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27bcdd082ce996def33fdd212572b9582cbc25f6717782a182c5688ad39d01c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living-amethyst-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6486a5d43474649c11227f0aeb85bf1a69e39679f755b9069d017290d3e1f4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138861 Malicious code in mature-beige-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b58ac1ce1747ab82066cab5e94a6bbb54369ba4c18c7646b95d182045d2e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88c98420f1f0956f46ee0cff4ca537adf0297c642bedd07aa79ef4b14de7f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50f0179a0f3e87e38e320dab22ce011811295d8d75adfabec985db7bce7f372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-gado-gado86-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1daf77eba80c4757091526ab6cab03cbe53f996d6a847876ff913caaec9a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kupat76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a4b53d5f0d00f3426c129ca242130fae42ba7878237b133669207254a3a8962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-gudeg9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f57f14e5f4d48a50346b2e75614b4807a73eda63aa3e86afa0805a3609541f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-liwet46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d7e594455671e20a7bc43097aaa92f38282c4933ed10e9f43485fcf4347ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-brongkos47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b05fb7552fa3d316c8c5da4a77d8063085aa0d9147d65ce8b50d12750dec3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-taiwan21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b941510baa5b025ec4a5fc84ff791bbb85aef5497a805c3181bb65e7c5ae88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...