MAL-2025-186090 Malicious code in chakra-ui-ophiuchus-sublimation-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f618e732db8d3ff69334d6194da83ee2d0ecd8d2a83ac60310bfeae1aa6068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178556 Malicious code in sahufarf-satidaf-favuafanti (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88082753542c8b237bede0bd78a271be4c9aee07ea18291343393ddf2d79308f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171903 Malicious code in sophieturner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29aab48cc9bb15d846c5fb251d0d3e4e4645ed4367cfb3d54cf2ba4bf720c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/aseswsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bcd724d074cf2bf5171a6fc09f73ba9383f5fc81b3ec9860feb28a4399d7c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e018013a3264fdbc81e982e02543a78f6d83eac75170c557d1eb0de4ac262c44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-diak-itu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32fe7781cc8e926b549d0f8cc9c2b9da4fae001d083b176f6e5abf315894ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151136 Malicious code in abel-poke15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7aa43826775b3deb3352bf55a602caa58caff2386ab43e62e44183e4e8d4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154554 Malicious code in dian-poke23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d351bec969408aeb9ad7239c562832e44b336c9f60639dabe5a959d768eefda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166551 Malicious code in syahlan-poke50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a690a6301b012302ee236db43f628f3568d5be736dfb1e04581e86a8d93f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161115 Malicious code in mutdaufs-marim-bustyasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21245f0eb736595e7446828cceeca2fadf3287cef08aa94ff632382587d3792d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-ursa-tailwindcss-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c5055c4409c3fb1e231a35760c7bde61d90da1af4606587d4ebb0be38a6c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-deneb-hyperion-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272cd4b9d4ac9f5f74e53ef7dc88df2918c406718307d5e5c981031ab4e14c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriver-manager-blitz-browserify-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc0a4eff4c39f48a9eea63ae5964eeb9d4723510f3e9bd81c14c04e40883a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146147 Malicious code in phoebe-cypress-telesto-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b663e67c0eeee9fc86d4dee7e14c2c3068bdbb64e9ee2c2d6a63e9ea6f40a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141333 Malicious code in css-minimizer-webpack-plugin-scripts-procyon-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c2cf53ec3d2c14f36fe622de2de28faa7727c54be9e881b825eee1b796a6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147915 Malicious code in shelljs-hydra-element-ui-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab001c7164727f861cd69a86cbc1b9c7acaf2e5fd3deb8c7cdccdeb0584dce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138645 Malicious code in damaged-rose-hedgehog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1eedb420cc37719c39433766087d1e29a23f2c97a0ddff500ad02bb3881002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-mieayam100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001cad09046984310c4904f201370fe0ed63646751c2f21028fe39780a4c5238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-mendut89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd889d837e09724e4a151d4ffd1986ec288e162c7235613028d3a7dc08a851ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-soto22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5064224a737fb5452c08349478aff96a3299b8c9ef6067efc4090a7e2c28f065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...