MAL-2025-146241 Malicious code in pino-pretty-package-markdown-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952b16eb60ed03681c44abafcaf46dd32e31af7ccc4d8fcdaf9149f4c1ceb47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-sagitta-rest-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344eaa4f44ff3990d404223172677fa10058ff4fc28d388bcf88a6e376e4df44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142389 Malicious code in express-odin-hermes-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4a12a2e3d29015fd60bb1b74335050cd8247b08bd4de7445715a897fe6709a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-magenta-krill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 235590e89046dd3066abdb46bd9511d593bddd04b1569cfaba1c03bed17bfd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f86b0b1b6155dd3006e7e93c1e7a95bf727fefa2a18af57766d6e35d1001b637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-gulai32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79cd6424d4153e685c786b829e5bc27887b53dabbdda0318e9e1d16fbaed8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_quelea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba749a0aa7ece79f4c0cff5f4dc2feeb569b505b3a7b8d10b294932f845605be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134056 Malicious code in hanafi-gaplek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b95b3b1a2489f422f4b48e1e038fe1be36e506c54561ff57335ad8ec97b412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136780 Malicious code in rudi-mie86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d335baea86dcf562b99a9cf8c243235d1f6811c9b8b8c9767225a3df92a3d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-teh36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e78c2c4754c85011f4f5b3a4bca47ab5932abfc3dd302a8892694690d70234f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-jamblang54-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c897729dae33067a4b34e8c8e71487ee96c2147abd832a11c43907d9b9f051d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-menjes47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16a9c5a26c933d600a2cb9c3d42281c1502349820f85aa25ee5048532f4e46e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sego55-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d5b1eba181dcf6991f941dc0e292d85130d3a8eae203239047f2508e95df2fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aed21089e67adb0242eb89c345def8e9511ddc499714adbb4e28cab4cbc7077f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gandul89-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e737cf42de99db90585e77938777cbfc8dcc2370a14caba852d03e199ab586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129973 Malicious code in rudi-mangga51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95fba8bacd7fa1540b2c5efb34657a4cd3ac598c50e1ac3a239a54f6414b54e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-tempe27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06def6e2a024fee5ed0d6bf693c817d9af9fbce0e72b87978a9bea1fc973808b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-oncom76-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09323647474f02f6b49bc229912a224537c3d0944fccc13f86088dc2bf80da8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lapis86-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c291f121d3405e2571c0bdbb7f16987b084c70cd76823164f60db0e92d8c74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b76e9fd1241e2756a4834886546e63ed7f020ee9e4d5df25964df428e96a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...