MAL-2025-141970 Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5363694bac4371cfc54011da12618a13ca07cb0b648c0243aacb32b1f569d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145520 Malicious code in node-config-terser-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd32bf25b58a06b2a70d39b030cfa34a19bc7b9c33000beea84c94963d55dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144042 Malicious code in juno-unuk-indus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cefc777df30f65493f2c63a279abb6952249875a9d4a6558de667af648f650c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146780 Malicious code in publish-concurrently-gacrux-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2cfe0c3e58ae6358bb280c4b65e3b0a5ad1a578037814733f4f7581aa92c89c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147704 Malicious code in scorpius-centauri-europa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf6a2a4415d58b5c60093c25d385b84511272149ac38e3a8500e2be1907eb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138863 Malicious code in mature-olive-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51b1e0332300270e88dc7b8badb6746f7ee2ef8a163e80bfee954b250041dc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138608 Malicious code in chemical-yellow-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843e469f42d82876902aa71724ad51d64fbf66e28c4d288a53478f1fd1746313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelling-peach-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829994b9f23f5e676f51c94748f0165c1855210eb72af32f09e3fb6cde81b34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138685 Malicious code in electrical-orange-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d82b614e64e0f96c58167da3c1f3037dac79370f7c384d319bdf588caa485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-tahu92-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a437c1fe096bced621822222b8101d79dedf3094ec631242e8a6b7585f2ada6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134709 Malicious code in joko-tumis54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173cd634e75261c72bab3b035fa9236a774b3d11661af12f450bd9ae8d307f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133420 Malicious code in fantastic_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54df02975caedbb2c82c4f3d18ce184ce336d7b5a5bdc7fb1ced983c1ca579b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-menjes19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d53e57ee07f3ac26be5f934a44b24ae168372f7eedd4aa0b5ac102df3cd1771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ruwet96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5b8fbe0d04669c83134c53d938fbf618839f7fae26c352086edc2a9d8d491a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132509 Malicious code in cindy-tapai100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b6bc196d1247c78701565c629a395ef25a3e74a96474473d583f80fcd6aae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tomat63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f180985d961ba379ab40b7c3c7058a54021fabda7754edb45cc5c86990cdfb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-keripik66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e4b75ae4e55c64c75d332211edbf47709c9cbd575995a3ffcf7d2c97a3e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136555 Malicious code in repulsive_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 668a6b0df56a067d23326fffb2e816ceea54bb5b87d33448cfbab700be3bc89e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135468 Malicious code in maman-pecel67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67edbb42548375e20f04504c3104a0b149ff8e822178df96f6b1153095e9d9eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133608 Malicious code in fundamental_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dda4cfdda15e2caece0f72622cd2ed8d040859ef80db50bb33f71ff26889497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...