MAL-2025-189659 Malicious code in start-iota-webpack-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a864f90e149e2b4496c53b9311b410904ffa98c5015ec30a16c6e3787810c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183879 Malicious code in masv-ilmo-civasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fe5fadc2eeea482ab68b89e556d556391d531c6dea1cda4eb93f1c0c2fb9c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anabuyil-na10n-niuli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74310c6595a6e68ece2ae5bd39db9543a32f755915f5dbc49fc116b4a4413520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuty-rkonatol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c52bae30aac38d6c372bae645b44b6aaa0d1d12443b1519e9ca66da1ec37ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilka-lniu-limaubikali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53256f05192d03b5870f2d9a9ced84b63c62a60c71ac609303eaf14f71d6cf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cf61624be4d346a201b0ea00c34142112d0d8cb28e60b8ba44329b100fc262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164848 Malicious code in rinto-poke72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131bd15da59fa4494bd9cb146f5a4c71e4fa3ce9a06a53e6b858aba74cbfd04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148419 Malicious code in sync-commitlint-materialize-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d6947e064d99431656bf3cd47e63c4c90b399ee4ca1923bb8f4d5a0c514454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148796 Malicious code in transport-playwright-zenobia-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c79d7663c95b031b90b984412a77e6cb307fbbbfbd3f9cb51a1ef7206d484b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-meteor-gemini-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfc9a8d26d2c0e67cc74c976c7f1e83ecd84e23ff3a4a64f056c4582cd67c98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-fornax-buffer-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3752fdd8a7fac85a02d1b9f3d783e990616dac37d1fc6cc93d0d1d4049ef7cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145163 Malicious code in mongoose-prompts-spectron-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 664e602c1c1f17845de88222beb490ff65a987dcab2ecaa0d720d4c748d9beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144905 Malicious code in meteor-corvus-heka-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479cdad0f54173ac42f22e183a69a52bf1784726c75ba6dc76eb8c6b38dab700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-126072 Malicious code in eko-gorengan23-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f78cec808b2376c1b7eb04584a2efce8349b3d2b991df3f066c46b473822061 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128038 Malicious code in kurniawan-brengkes6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3df88813c625a58d6ca70267fac8b5bc4dfebe74298780609fcf11efeb1118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122146 Malicious code in nurul-botok33-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151e2b9f3d5280372e7ac600b03d16b985b2d5d1383962f193866469c1e73ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a6172071b04b810349ed813d95dcc6a0f7725b1f8a5d8354a757be7f87b8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6220f87a437e1393e159c18cd6d0b8ba152d416924db2e56dc56589b2faa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-semur43-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d567f8315e214727041aec30486ecf9a03c068e8e6b14cab3990bbdaca59b1fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...