MAL-2025-140720 Malicious code in charon-csv-development-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e003bff80fbb2c9adfc58b7b1d2c7c219da1fa8d285b269248e4b07db64caf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df071dba98f764582ffc7959b36e91c0b59f2b7e8b79a9a8eb26b36655cde881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147506 Malicious code in rollup-package-duplex-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821c407ff719dc4afe450356edd924866833272548005ebb50e5b1f4254670c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142008 Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0154347a1de85eb8f3cfcc2d53c17da34e78c91e8d4ac0c14e7bace97e22ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-miebogor79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a7dd538bdee92ad66d06ab2f444bf3ba7e7241a07eede95a4efb0b624fad37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-gulai40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb0f24eee1406845b1a9cbcf67236037c9d24bdef02f2cfc99cd4fe316f46e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128272 Malicious code in lisa-gado-gado55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1afbbf754bd6c435e3577f596f9c5ef9e89c91b57464eb06cc81fffaa1b208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42b59eb0f645a02cbe508054755207d0c3fdaac9f0db12d75754968ae9092c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939ffe5596887824633dabc2162994df661ab750076bda631aebb0391bb92041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-lontong20-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8b7ed5094033d59c8acdffd0fd49e72bd4182232df335f8f5f4acb6e443efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8f3f23c2a8d30e2789ad7fb12319fc49eb8853dee8adbbd5cbad9bca1a4f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127802 Malicious code in joni-kembang24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fc3f4ad5874e0bd694b76aff3bd0338c1b7ea8c10537be8832a68af44f7b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6353842e02650ae7c3cdce2a6677ebf67f7687be320f59a0467fd7833c08fb03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119010 Malicious code in bumpy_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1823496bd2992ed5207a073abb6f7eb22606f1e511841fa4a02dd8b9a3cb87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029ccd6644af84f1417eae2a25754699f86f2054d017ad0bd11ab2d6e5dc51e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gulai25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4b72fbf95c5a3b370c91fcaef68d0d5789202ced9f87e51138c84122445448f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119084 Malicious code in cici-lepet41-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 840340299538c1cdbbb3cb9fc43dbee67e80d7cfa081d6b7ce2bd6d2362eaad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123736 Malicious code in tuti-telurtahu49-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2659a313c7a9b24bd070a76cf17cdfa945c374663ae8daee234c2a84b404c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-kupang55-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a2dba971a0e0b64e0f7802e51201ad7053dbb23902bd140a1beb1d80adcbb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...