MAL-2025-141121 Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145034 Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc303b8d333e34ccd885c30d22a4f535630b5868e5283132cd28f325e1ea27a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-getas44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0319cb761dead005792bdc52f0378034a91eb2aa07958dc7913bdd8c345f4b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-esdoger6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e625a504f5c79ef316c30318236f5b8c436a57cef4062117d941834266e39f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131665 Malicious code in yuni-naget41-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc3b706d2d70a910064b9ef22499d493d1c6bc53e305b0ea8c463577100b511 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130053 Malicious code in sari-sambalado26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2658f2576b415c276aca2f25cb69ba04a0b55ff8615d885b0f740a0ab1c12a38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127910 Malicious code in kiki-otak-otak61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21634241609dab4080fe10f4e81601e5d8fdd41ef3141da1abcffd30abf6a8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-127636 Malicious code in jaja-sego60-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 810752847647b320e9a3bac91cbaa730723f7fa0ea103fdf604af619ea350f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125325 Malicious code in cautious_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1da9b574e0243124bbc5bbccf055e07c51c69d5bfda8e5cf4adaeb413c431dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130768 Malicious code in udin-sambalado27-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f2d6b0187eded169096712dd0f3e06f7ffcd0636b416ee32b359bac35daf01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-gaplek45-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40fb2b2965a43373926b0d212655e7ea16468a620b13da660a56f17e51d8828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123769 Malicious code in udin-tumis23-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d769b811fa46c25b95e6ed2bf57b1fcdd5fb388c12c18aece76d262618365a21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-gulai71-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be458035e86955f4af2afe744696349aa7b6ad27b21ad1f743a1b7c7ed59fa48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121090 Malicious code in joko-mangut83-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b195fc0724086f8b8b76fc2ef39b7aff4bdcb48aa578ff9fd8d9fe0d3e4a41c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-123576 Malicious code in tiara-gorengan87-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5180589da675cd0fadde1b6534854634e465d065f0f24d26f7c6bea478cbb4c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669407636cffd7bc6f758a2254226964fa5721e040f76bef4bb53979bbc92443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778d2aa1e1870ca23dfa57dd04af69dacc2ff31251cfd6dfa8002a11408317c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113188 Malicious code in comparable_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648ff7283cdf2083febb8e779f692a2c2f041a7bb68ea0363ece4bb22110fd46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...