MAL-2025-145004 Malicious code in mira-cache-cross-env-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 300f84b23994bc74cbce26b47d6fa618ed69bc1cd0ffc0ca0702cdd19eb02cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-apollo-markdown-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43877fef46565713ec332e3eaea0f240ce8a94564f81b080ce2c75687fdced15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-inquirer-run-script-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488f28521232da95e63a6edd9fb762f1d2effcbc53e3dd58de1c4f35e3bf3ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147096 Malicious code in redis-atlas-docusaurus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc6739e1d77dd79766a095815817023e3d3a697933689bbea3e6ae70e215443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145850 Malicious code in ophiuchus-vulcan-quark-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0d097941e96216c73a95323d1fdf14c3176c5863361cb6c73a54a9d94ca387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146273 Malicious code in playwright-bellatrix-postcss-loader-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f467e2fc268d1b704ef9d37ba01500dbe9f530113c6d49aa5e08f79a0efd31fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142982 Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140085 Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-tapai51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c998b31920dbee3fb51740e42cca76ffe2857ed9ca51b2883b90f76230185f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9def6fceb456b061c00e498a11707262f85486cef1aff1695db10f81d7d4f341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134809 Malicious code in kiki-lumpur59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738141615c68ad459741b1b1f75c58819d65dd110e8ef8dd61dc8c818f81c78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b32cb008dddff5dc668d212ce339b52c28cc4202c654f3985597d6786eeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b25b2db06adea8332740dd3205556375e1a92751cb64a659cd7ab8511567707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-moci37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5711fb8f8776ba97f37c37987146b349a7979815ad0e0467d1f7b05e7adc73e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-wajit19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b9937d10763111e14f78008ad4cf9ea2d01e8e526da51be601277f3133b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lutis50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ddafa2956831a4dad7b775a14b8b8529e29a8d7d86617bfd6c0d02ce262e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129478 Malicious code in putra-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1fef17ee4c5f641a5e7d7ff3ddccb56c7f8dc9796f164c2e631c53d701c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...