MAL-2025-140440 Malicious code in carpo-frontend-callback-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322ec4015b6527aab0c3603af097b5868aa95270eef43729041f984b436f921e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146636 Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca332e25d9d61085e10b8a93b01916326bfcc7343eb2d74d224e9fe7cfc7db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145806 Malicious code in ophiuchus-await-ini-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71406720cd9858605a8e1fb3b053d8fa676c64f342722c5abdbd8c8436896b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140162 Malicious code in buffer-mutation-changelog-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24e6b39bd12e70f7e32d3f9df10e9c2f4c51ba4b5212e46797a8d7d6c521b505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144072 Malicious code in jwt-figures-ora-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d01d7893c541cee3e42f365513a2171568f4818971fd777e268fd982ecb98b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147903 Malicious code in server-passport-run-script-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549ea74d20cdc6fbddd62cdb479131c1ea4b36d4ae95fc8be2221fff390ace01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139694 Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5239f07833ff779bfa840185510eabd8b41c52aba14648b5989d7abaa83cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145146 Malicious code in mongoose-andromeda-janus-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a74582e07ba3cac3a682590877158bd44f994397731036233950c92b4b26f28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143131 Malicious code in halley-castor-less-loader-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d184b9279a477b2e66964b4dd26164f603b730d6da0b7938958256ac3ec68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142942 Malicious code in global-loglevel-lacerta-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 852a30326ba54024be4ad2981dd085309ca4d5aec2dd66869c85e5abf7ee2433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138888 Malicious code in naughty-fuchsia-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8438d011ee38f73f0dd1f577ba1d9db6f206750b08c336e7de7afffdf837893a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138985 Malicious code in romantic-silver-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1510931cdd9bdcbb581abd2d21b6fb8cc8b9de1afdf7db21b5f8e2afaf979ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-ongol-ongol44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf4118ac5f5adc3afb23a01d5375afc7769d7e7d48991a738a6c2c9f82c3188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a005e9958eef9607110c0f64f54308d849c23afc03d853599a86c31ecb1078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136438 Malicious code in putri-ronde91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6777fe78fddfa2a8bb9e62de1a3c9e767e3656b9e50e68e9b236241e51fa8399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132198 Malicious code in basic_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d0da4913a632950b0d0105d201d3cf2a94d459a34ee81b1f7027e433372a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135525 Malicious code in maya-miebogor44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2ddd411446bd85385834926ed97f5d372e12e6525056f2bbc51a0a132de29a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133010 Malicious code in eka-tongseng38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a4392714167df332cfe3518e619f93ea38ee6d1edff787e057c503518afaa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132080 Malicious code in arif-esdoger65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13763b76475e392fbffc2b94cd88618cf4e3e196954ea71e08ae868057581ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134376 Malicious code in international_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bbe09a5563f25eb65c8b947a3697c781481d61409a145cbc4dca5a009e2537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...