MAL-2025-187053 Malicious code in frontend-uninstall-foundation-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689a30b58745647f6d8ae54285da6f284047816f0b89c8c04d4a4e632d5b81e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179744 Malicious code in kiut-acg-avefivubug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8a7ab6f530f7639e392312915106e24d5b8eee01bb599f4a368c5703fde007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179520 Malicious code in anais-papmoa-0pia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284c7c0f3318106daeffb0218424cd355124f9327f4af6dda3ab3ebd98f1ac05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173790 Malicious code in butry-yust-nutrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538ec4857d649dd9f18c7a6ab62094eb12556516126280c0f6f98635ee5f409c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172032 Malicious code in yudiputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273cf005fd4776f081cc0046ea49c3983c9f386484b30dfc1088eb310e0a3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153208 Malicious code in avminah-fagmas-fgofagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a98369333a089b7369c5e008c6f154d5110aa63d6fa9a024833d86e0cb68ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166868 Malicious code in teagood-cuekin98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0e4d6d3f17da78db200e649e2e1a8bf08fcd90144c7c405f112762e089e738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-miranda-element-ui-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478640b4176788ec26ab2af3eaf3a84218eefd1aacee687df057a7012d20be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146510 Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 563f06ee953a2d8286e275886aa2cf90f60e513727cb95779a33a34b5023997d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-nasisayur57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f0afba7875fd9189e704bd3aaa34bd90e37acb508d8dcfa5980be36749d728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131781 Malicious code in zaki-sambalado88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d9212b329b7283740a174342c6ff76af3c0f157b9b51730524a1a9c79f6200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb6151d106617a16094b40c8709f00b8be375672b5ca39ea614c211d9926c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118450 Malicious code in zaki-ragi51-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6967c051738473b6df538738f13f7cb05df38b857dfcd172011c09dcb242de39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-buburayam70-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cec98ef4aa10786a14f2294c429604cc983c4a528c2e4445b763423dd110cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180c4ad7369409f63785b8874c39268c336caef3b5d3f7ad59bf54a35e777c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103981 Malicious code in imperial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf9405f17ea3fc897550b2c60ff346feddc45536a3b2cd0be04e0d98420f578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36d816edfe44028d56416e769eb7811e34a17b904d6fcdfe552925d355af755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-sambel29-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 984ec74caff7adab856f15713c34095a486199a37ee4202d67a520034fed7d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-dodol78-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e51e3d4fb18a59f19216fed2b684b4cd8864491ba7c4e562e48ac01cba3ea03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...