MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8836ff91b7a12090c7aff974df1a9e1781fd659930a1c1b2e602420607e9a5eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140577 Malicious code in ceres-superagent-sedna-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4f07a457df67ef5a49483ad7c134ca928b0e545316389b55502ad45407669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-otak-otak17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e861f3033859743a7e33bb2db0798ba79f0120f1d9ec72d8d037d1b9ba11a325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61fe27d1256932107a575f2d22f0d92c6e1dda5689901eee569a32ef66c629ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kolak8-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7178aca579de21e9d9299bd2ffa3d3cb663cce33dff9fc86a3c913000dd5949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-sate42-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cd2d03819bd82b5f8a5faea50e29f2fe1bb4869c01a41810d56f06630ced2f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-nasisayur82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1bbb7b93d3dca25746e056e1e666324a2f6e68834aeb0defae66ab703a9f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113717 Malicious code in erwin-lutis45-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae38299d5cf829932069b6cedcd94909d23d3dbef71688f2208d44f26936df3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690f7309495db167aef0c789e9a75925827ef4cf064d359517d0757c766874ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107501 Malicious code in putri-lapis7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea12c289d55642828b7fe14182b7132cbb9b05eef6d8ece0911ab96c71459e01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111167 Malicious code in yanti-gembus57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa971153b9d252568cf53b431b360d6356515127b1031a0ab1e60ee74a9493c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635b77944a9e322fd7634553d019070210797c0ab308a50a709c3ccd07396f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76806 Malicious code in ancient_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7606e3bc8ef627bb8624b1c45824762cdb5c96ec2ea3143267afd2fb07c25e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-mendut3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0fc1da2073ae3f775d0957354debaf3c224aa9c07245143fa5e6384295be11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...